1 matches found
CVE-2026-44282 Election question titles allow stored script execution
Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management rights can store HTML or script-bearing content in question.body. The questiontitle helper returns the translatable question body through...
4.8CVSS5.9AI score
SaveExploits0References8
20