Political Futures

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 24 April 2023

Manchester 2023

Manchester 2023 29th November - 8th December 2023 CiviCRM Manchester 2023 CiviCamp, Sprint and…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 27 February 2023

More Greetings - Personalised Strings for all Contacts 1.1.0

More Greetings - Personalised Strings for all Contacts 1.1.0 Extension More Greetings - Personalised…

.no-js-https%3A%2F%2Fdemocracyspotdotnet { display: none !important; }

DemocracySpot 22 February 2023

Reflections on the representativeness of citizens’ assemblies and…

(Co-authored with Paolo Spada) Introduction For proponents of deliberative democracy, the last couple of years could not have…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 15 February 2023

CIVI-SA-2023-04: File Type Restrictions

CIVI-SA-2023-04: File Type Restrictions CiviCRM's file-upload mechanism includes a guard to limit the range of…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 11 January 2023

CiviSEPA 1.7.0

CiviSEPA 1.7.0 Extension CiviSEPA - SEPA Direct Debit Extension BjoernE 2023-01-11 - 05:02 …

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 4 January 2023

CIVI-SA-2023-03: Asset Builder XSS

CIVI-SA-2023-03: Asset Builder XSS Asset Builder allows CiviCRM and its extensions to generate dynamic assets. A…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 4 January 2023

CIVI-SA-2023-02: CiviEvent XSS

CIVI-SA-2023-02: CiviEvent XSS CiviEvent included a vector for reflected cross-site-scripting (XSS) attacks. …

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 4 January 2023

CIVI-SA-2023-01: Help Subsystem RCE

CIVI-SA-2023-01: Help Subsystem RCE The "Help" subsystem did not sufficiently validate the location/origin of its…

.no-js-https%3A%2F%2Fdemocracyspotdotnet { display: none !important; }

DemocracySpot 20 October 2022

The haves and the have-nots: who benefits from civic tech?

Photo by Lewis Nguyen on Unsplash “Civic tech” broadly refers to the use of digital technologies to support a range of citizen…

.no-js-https%3A%2F%2Fdemocracyspotdotnet { display: none !important; }

DemocracySpot 29 September 2022

Voices in the Code: Citizen Participation for Better Algorithms

Image by mohamed Hassan from Pixabay Voices in the Code, by David G. Robinson, is finally out. I had the opportunity to read the…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 15 July 2022

airmail v2.1

airmail v2.1 Extension Airmail andie 2022-07-15 - 07:39 Release Date …

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 1 June 2022

CIVI-SA-2022-07: APIv3 Access Bypass

CIVI-SA-2022-07: APIv3 Access Bypass A vulnerability in processing APIv3 AJAX requests could allow a malicious…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 26 April 2022

Manchester 2022

Manchester 2022 8/10th - 12th October 2022 CiviCRM Manchester 2022 Sprint CiviCRM Manchester 2022 is…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 6 April 2022

CIVI-SA-2022-06: Dompdf 1.2.1

CIVI-SA-2022-06: Dompdf 1.2.1 The "dompdf" library has a vulnerability which allows remote code execution. It may be…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 16 March 2022

CIVI-SA-2022-05: CKEditor v4.18

CIVI-SA-2022-05: CKEditor v4.18 CKEditor had a vulnerability that could allow execution of Javascript code. The…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 16 March 2022

CIVI-SA-2022-04: jQuery UI v1.13

CIVI-SA-2022-04: jQuery UI v1.13 jQuery UI v1.12 included multiple cross-site scripting vulnerabilities. It has not…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 16 March 2022

CIVI-SA-2022-03: Permission Advice

This is not a security vulnerability. It is a mitigation to protect against misconfiguration. CiviCRM includes a large number of…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 16 March 2022

CIVI-SA-2022-02: CiviEvent Importer, SQL Injection

When importing "Participant" records for CiviEvent, some inputs were not suitably escaped.

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 16 March 2022

CIVI-SA-2022-01: CiviContribute Access Bypass

When accessing the Contribution View page insufficient permission checking was occurring which meant that if you knew the url and…

.no-js-https%3A%2F%2Fcivicrm { display: none !important; }

CiviCRM - Open source constituent relationship management for non-profits, NGOs and advocacy organizations. 14 March 2022

I Stand With Ukraine

A few weeks prior to 24 February, I’d given up reading the news. It was a very happy time. Since Russia’s invasion of Ukraine,…

Loading…