CVE-2015-5720
MEDIUMMISP <2.3.90 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.
Scores
CVSS v3
6.1
EPSS
0.0025
EPSS Percentile
47.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
published
Affected Products (2)
misp-project/malware_information_sharing_platform
< 2.3.89
n/a/n/a
Timeline
Published
Sep 03, 2016
Tracked Since
Feb 18, 2026