StarCitizenTools mediawiki-skins-Citizen vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Latest StarCitizenTools mediawiki-skins-Citizen vulnerabilities

CVE-2025-62508 — Citizen vulnerable to stored XSS in sticky header button messages (CVSS 6.5)
CVE-2025-53370 — Citizen stored XSS vulnerability through short descriptions (CVSS 5.4)
CVE-2025-53368 — Citizen is vulnerable to stored XSS attack in the legacy search bar (CVSS 5.4)
CVE-2025-49579 — Citizen allows stored XSS in menu heading message (CVSS 4.8)
CVE-2025-49578 — Citizen allows stored XSS in user registration date message (CVSS 5.4)
CVE-2025-49577 — Citizen allows stored XSS in preference menu headings (CVSS 5.4)
CVE-2025-49576 — Citizen allows stored XSS in search no result messages (CVSS 5.4)
CVE-2025-49575 — Citizen allows stored XSS in Command Palette tip messages (CVSS 5.4)
CVE-2024-47536 — starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field (CVSS 5.4)
CVE-2024-36123 — Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline (CVSS 5.4)