Vulnerability Details CVE-2024-45594
Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.0%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2024-45594
-
cpe:2.3:a:decidim:decidim:0.28.0
-
cpe:2.3:a:decidim:decidim:0.28.1
-
cpe:2.3:a:decidim:decidim:0.28.2