Decidim cross-site scripting (XSS) in the pagination
ImpactThe pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`.PatchesNot availableWorkaroundsNot availableReferencesOWASP ASVS v4.0.3-5.1.3CreditsThis issue was discovered in a security audit organized by the [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/) and funded by [netidee](https://www.netidee.at/) against Decidim done during April 2024. The security audit was implemented by  [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),