| Package | Affected versions | Patched versions |
|---|---|---|
| decidim-meetings | ≥ 0.28.0, < 0.28.3 | 0.28.3 |
| decidim | ≥ 0.28.0, < 0.28.3 | 0.28.3 |
The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL.
Not available
Disable the creation of meetings by participants in the meeting component.
OWASP ASVS v4.0.3-5.1.3
This issue was discovered in a security audit organized by mitgestalten Partizipationsbüro against Decidim. The security audit was implemented by the Austrian Institute of Technology.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free