starcitizenwiki/mediawiki-extensions-embedvideo Security Advisories | GitStock

high2026-09-25

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

GHSA-v65j-hff3-753c · CVE-2026-57440

high2026-06-19

StarCitizenWiki Extension Embed Video: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled

GHSA-5c7p-g73q-rpg5 · CVE-2026-55692

high2026-06-19

StarCitizenWiki Extension Embed Video: Stored XSS via unsanitized class passed to template

GHSA-7h5p-637f-jfr7 · CVE-2026-55691

high2026-06-19

StarCitizenWiki Extension Embed Video: Stored XSS via unsanitized service name in exception text

GHSA-c29q-5xm7-5p62 · CVE-2026-55690

high2025-09-24

Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes

GHSA-4j5h-mvj3-m48v · CVE-2025-59839