ME
Product
mediawiki-skins-Citizen
10
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 10Low 0
Watch
Add mediawiki-skins-Citizen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62508 | 6.5 | Oct 17 | Citizen vulnerable to stored XSS in sticky header button messages Affected: >= 3.3.0, < 3.9.0 |
| CVE-2025-53370 | 5.4 | Jul 3 | Citizen stored XSS vulnerability through short descriptions Affected: >= 65a7ffd927467c8c3557146d1ac6de62b0369b6c, < c85a40bddc8651fff66df83a72debddcb34f0521; >= 1.9.4, < 3.4.0 |
| CVE-2025-53368 | 5.4 | Jul 3 | Citizen is vulnerable to stored XSS attack in the legacy search bar Affected: >= 1.9.4, < 3.4.0; >= b2bd79196db1153d0bc1bd51a646d957cbdf4aec, < aedbceb3380bb48db6b59e272fc187529c71c8ca |
| CVE-2025-49576 | 5.4 | Jun 12 | Citizen allows stored XSS in search no result messages Affected: >= a0296afaedbe1a277337a2d8f1da83cb3a79b9ab, < 93c36ac778397e0e7c46cf7adb1e5d848265f1bd; >= 2.31.0, < 3.3.1 |
| CVE-2025-49578 | 5.4 | Jun 12 | Citizen allows stored XSS in user registration date message Affected: >= 64cb5d7ab3a6dc0381fae54b31e8fc4afadc8beb, < 93c36ac778397e0e7c46cf7adb1e5d848265f1bd; >= 3.3.0, < 3.3.1 |
| CVE-2025-49575 | 5.4 | Jun 12 | Citizen allows stored XSS in Command Palette tip messages Affected: >= 4fa69e1d062dca7e407cc0530cf1da3e2baaf0b5, < 93c36ac778397e0e7c46cf7adb1e5d848265f1bd; >= 3.2.0, < 3.3.1 |
| CVE-2025-49577 | 5.4 | Jun 12 | Citizen allows stored XSS in preference menu headings Affected: >= a741639085d70c22a9f49890542a142a223bf981, < 93c36ac778397e0e7c46cf7adb1e5d848265f1bd; >= 2.13.0, < 3.3.1 |
| CVE-2024-47536 | 5.4 | Sep 30 | starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field Affected: >= 2.6.3, < 2.31.0 |
| CVE-2024-36123 | 5.4 | Jun 3 | Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline Affected: < 2.16.0 |
| CVE-2025-49579 | 4.8 | Jun 12 | Citizen allows stored XSS in menu heading message Affected: >= 54c8717d45ce1594918f11cb9ce5d0ccd8dfee65, < 93c36ac778397e0e7c46cf7adb1e5d848265f1bd; >= 2.4.2, < 3.3.1 |
Showing 10