app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.
misp-project misp 2.4.91