MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.Referenceshttps://github.com/MISP/MISP/commit/8283e0fbec551f45f3f181cdb2cf29cddc23df66
