Starcitizen.tools
Starcitizen.tools Citizen: vulnerabilidades y CVE
Starcitizen.tools Citizen tiene 10 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-62508 | Media (6.5) | 0.45% | — | 17 oct 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in the sticky header button message handling. In… |
| CVE-2025-53370 | Media (5.4) | 0.35% | — | 3 jul 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, short descriptions set via the ShortDescription extension are inserted as raw HTML by the Citizen… |
| CVE-2025-53368 | Media (5.4) | 0.32% | — | 3 jul 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when… |
| CVE-2025-49579 | Media (4.8) | 0.41% | — | 12 jun 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings using the Menu.mustache template are inserted as raw HTML, allowing anybody who can edit those… |
| CVE-2025-49578 | Media (5.4) | 0.42% | — | 12 jun 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by `Language::userDate` are inserted into raw HTML, allowing anybody who can edit those messages to… |
| CVE-2025-49577 | Media (5.4) | 0.41% | — | 12 jun 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various preferences messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the… |
| CVE-2025-49576 | Media (5.4) | 0.41% | — | 12 jun 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who… |
| CVE-2025-49575 | Media (5.4) | 0.41% | — | 12 jun 2025 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Multiple system messages are inserted into the CommandPaletteFooter as raw HTML, allowing anybody who can edit those messages to insert… |
| CVE-2024-47536 | Media (4.8) | 0.46% | — | 30 sept 2024 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their name can XSS themselves by setting their "real name" to an XSS… |
| CVE-2024-36123 | Media (5.4) | 0.47% | — | 3 jun 2024 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML (including Javascript) can be injected by someone with the… |