EIP-2026-109496

This exploit demonstrates a stored XSS vulnerability in MISP 2.4.171 by injecting a malicious script into the 'Name' parameter of a cluster, which executes when the cluster is displayed. The attack requires authentication and leverages insufficient input sanitization.