Skip to content
OpenAdvisories

Package · RubyGems

decidim-elections

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2026-44282

    Election question titles allow stored script execution

    Decidim is a participatory democracy framework. Prior to 0.32.0, a low-privilege process-scoped administrator or election editor with question-management rights can store HTML or script-bearing content in question.body. The question_title helper returns the t…

    decidim decidim decidim-elections RubyGems