Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "5.1.3"
},
{
"introduced": "6.0.0"
},
{
"last_affected": "6.2.0"
}
]
}