CVE-2024-45594

Name of the Vulnerable Software and Affected Versions: Decidim versions prior to 0.28.3 Decidim versions prior to 0.29.0

Description: Decidim is a participatory democracy framework. The meeting embeds feature used in online or hybrid meetings is subject to potential XSS attack through a malformed URL.

Recommendations: For versions prior to 0.28.3, update to version 0.28.3 or later. For versions prior to 0.29.0, update to version 0.29.0 or later. As a temporary workaround, consider disabling the creation of meetings by participants in the meeting component until a patch is available.