Lucene search
+L

1 matches found

RubySec
RubySec
•added 2026/07/06 12:00 a.m.•19 views

decidim-elections - Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Impact A low-privilege process-scoped admin or other election editor with...

4.8CVSS6AI score0.00391EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder