starcitizentools/mediawiki-skins-citizen Security Advisories | GitStock

medium2025-10-20

Citizen vulnerable to stored XSS in sticky header button messages

GHSA-g955-vw6w-v6pp · CVE-2025-62508

high2025-07-03

Citizen vulnerable to Stored XSS through short descriptions

GHSA-prmv-7r8c-794g · CVE-2025-53370

high2025-07-03

starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions

GHSA-rq6g-6g94-jfr4 · CVE-2025-53368

medium2025-06-13

starcitizentools/citizen-skin allows stored XSS in user registration date message

GHSA-2v3v-3whp-953h · CVE-2025-49578

medium2025-06-13

starcitizentools/citizen-skin allows stored XSS in menu heading message

GHSA-g3cp-pq72-hjpv · CVE-2025-49579

medium2025-06-13

starcitizentools/citizen-skin allows stored XSS in preference menu heading messages

GHSA-jwr7-992g-68mh · CVE-2025-49577

medium2025-06-13

starcitizentools/citizen-skin allows stored XSS in search no result messages

GHSA-86xf-2mgp-gv3g · CVE-2025-49576

medium2025-06-11

Citizen skin vulnerable to stored XSS through multiple system messages

GHSA-4c2h-67qq-vm87 · CVE-2025-49575

medium2024-09-30

starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field

GHSA-62r2-gcxr-426x · CVE-2024-47536