js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
Published March 18, 2023.
Misp-project Malware Information Sharing Platform