Lucene search
+L

1 matches found

RubySec
RubySec
added 2026/07/06 12:00 a.m.8 views

decidim-elections - Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Impact A low-privilege process-scoped admin or other election editor with...

4.8CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder