CVE-2026-45572 (decidim-core): Decidim - HTML content blocks allow stored script execution

21-Jul-2026 2

Originally appeared on RubySec.## Description A privileged admin user who can edit an affected landing page can store arbitrary HTML/JavaScript in an `HTML block`, and the public page renders it with `html_safe` and no output escaping. ## Impact - A user with landing-page edit...

RUBYONRAILS

to get 30% discount on our bundle!

Prepare for your next tech interview with our comprehensive collection of programming interview guides. Covering JavaScript, Ruby on Rails, React, and Python, these highly-rated books offer thousands of essential questions and answers to boost your interview success. Buy our 'Ultimate Job Interview Preparation eBook Bundle' featuring 2200+ questions across multiple languages.

Ultimate Job Interview Preparation eBook Bundle

CVE-2026-45572 (decidim-core): Decidim - HTML content blocks allow stored script execution

RUBYONRAILS

Bestseller

Tags

Related Links

Useful Links

Quick Links

Get in Touch