{"id":"CVE-2018-11562","details":"An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for an event view and then clicks on the deleted attributes quick filter.","modified":"2026-08-07T14:54:13.304861Z","published":"2018-05-30T20:29:00.313Z","references":[{"type":"FIX","url":"https://github.com/MISP/MISP/commit/10080096879d1076756f62760d6daf582b6db722"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/misp/misp","events":[{"introduced":"4ad7a4a26e3608ef74fa7023ad0a1045de2b1f3b"},{"last_affected":"4ad7a4a26e3608ef74fa7023ad0a1045de2b1f3b"},{"fixed":"10080096879d1076756f62760d6daf582b6db722"}],"database_specific":{"cpe":"cpe:2.3:a:misp-project:misp:2.4.91:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.4.91"},{"last_affected":"2.4.91"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["2.4.91","v2.4.91"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-11562.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}