CVE-2026-103662 — MISP reflected XSS in taxonomy tag confirmation forms

CVE-2026-103662 concerns reflected cross-site scripting (XSS) in MISP taxonomy tag confirmation forms. A user-supplied tag name was inserted into HTML without encoding. The source states that the vulnerability metadata is a draft and requires human validation before publication.