Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/13 4:35 p.m.10 views

GHSA-FC46-R95F-HQ7G Decidim has a cross-site scripting (XSS) in user name

Impact A stored code execution vulnerability in the user name field allows a low-privileged attacker to execute arbitrary code in the context of any user who passively visits a comment page, resulting in high confidentiality and integrity impact across security boundaries. Patches N/A Workarounds...

9.3CVSS6.5AI score0.00356EPSS
SaveExploits0References6
Rows per page
Query Builder