Lucene search
+L

2 matches found

CNNVD
CNNVD
added 2024/11/13 12:0 a.m.9 views

Decidim 跨站脚本漏洞

Decidim is an open source participatory democracy framework from Decidim, written in Ruby on Rails. A cross-site scripting vulnerability exists in Decidim versions 0.28.0, 0.28.1, and 0.28.2, which stems from a potential cross-site scripting attack on meeting embedding functionality used in onlin...

7.7CVSS5.9AI score0.00244EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.14 views

PT-2023-24662 · Decidim · Decidim

Name of the Vulnerable Software and Affected Versions: Decidim versions prior to 0.26.7 Decidim versions prior to 0.27.3 Description: The processes filter feature in Decidim is susceptible to Cross-site scripting, allowing a remote attacker to execute JavaScript code in the context of a currently...

8.1CVSS6.6AI score0.00736EPSS
SaveExploits0References12
Rows per page
Query Builder