Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/09 5:59 p.m.3 views

GHSA-9MVP-W4RR-5C6X decidim-elections: Election question titles allow stored script execution

Description A low-privilege process-scoped admin who can manage elections can store arbitrary HTML in the question statement/body without sanitization, and the public elections UI renders that value unsafely. Technical description This stored XSS appears because election question titles are...

4.8CVSS
SaveExploits0References3
Rows per page
Query Builder