In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added.Referenceshttps://github.com/MISP/MISP/commit/a659664447a7b2a383cb9e0f6b43dcb43ec69194
