CVE-2024-45594 — Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds
Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This…
Published: 2024-11-13 · CVSS: 7.7 · CVSS 3.1
Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7