1 matches found
decidim-elections - Election question titles allow stored script execution
Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Impact A low-privilege process-scoped admin or other election editor with...
4.8CVSS5.8AI score0.00369EPSS
SaveExploits0References1Affected Software1
20