A vulnerability classified as problematic was found in Decidim up to 0.30.4/0.31.0. This issue affects some unknown processing. Executing a manipulation of the argument Name can lead to cross site scripting.

This vulnerability is handled as CVE-2026-23891. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.