CERT24GCVE-1-2026-20300 — MISP Reflected XSS in Taxonomy Tag Confirmation FormsLoading data…
CERT24Threat Observatory
Period

GCVE-1-2026-20300 — MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP taxonomy tag confirmation forms reflect a user-supplied tag name into HTML without encoding. This enables reflected XSS through a crafted URL when an administrator visits the URL. The source states that the metadata was generated with an AI model and requires human validation.

← Back to intelligence

GCVE-1-2026-20300 — MISP Reflected XSS in Taxonomy Tag Confirmation Forms

MISP taxonomy tag confirmation forms reflect a user-supplied tag name into HTML without encoding. This enables reflected XSS through a crafted URL when an administrator visits the URL. The source states that the metadata was generated with an AI model and requires human validation.