Stored Cross-Site Scripting in MISP Event Graph Feature

CVE-2026-103321

What is CVE-2026-103321?

The vulnerability in MISP pertains to a stored XSS flaw within the event graph preview feature. This issue arises when an authenticated user creates or modifies an event graph entry. The input is not adequately validated on the server-side and is subsequently rendered as part of an HTML img element's src attribute through string concatenation. This inadequate validation allows an attacker to inject malicious scripts that can execute within the context of the victim's browser. Consequently, this can lead to unauthorized access to sensitive information, including session tokens and cookies, and may facilitate actions being performed on behalf of the victim within the MISP application.

References