Description
Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| decidim | decidim | >= 0.28.0, < 0.28.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | decidim-meetings | >= 0.28.0, < 0.28.3 | 0.28.3 | GHSA-j4h6-gcj7-7v9v |