ST
Vendor
StarCitizenTools
13
CVEs
0
On KEV
0
New 30D
Products
ME6.5
mediawiki-skins-Citizen
StarCitizenTools
10 CVEs0 on KEV0 new
ME8.6
mediawiki-extensions-TabberNeue
StarCitizenTools
2 CVEs0 on KEV0 new
ME8.6
mediawiki-extensions-ShortDescription
StarCitizenTools
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-62508 | ME mediawiki-skins-Citizen StarCitizenTools | 6.5 | Oct 17 | Citizen vulnerable to stored XSS in sticky header button messages |
| CVE-2025-53369 | ME mediawiki-extensions-ShortDescription StarCitizenTools | 8.6 | Jul 3 | Citizen Short Description stored XSS vulnerability through wikitext |
| CVE-2025-53370 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jul 3 | Citizen stored XSS vulnerability through short descriptions |
| CVE-2025-53368 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jul 3 | Citizen is vulnerable to stored XSS attack in the legacy search bar |
| CVE-2025-53093 | ME mediawiki-extensions-TabberNeue StarCitizenTools | 8.6 | Jun 27 | TabberNeue vulnerable to Stored XSS through wikitext |
| CVE-2025-49576 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jun 12 | Citizen allows stored XSS in search no result messages |
| CVE-2025-49578 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jun 12 | Citizen allows stored XSS in user registration date message |
| CVE-2025-49579 | ME mediawiki-skins-Citizen StarCitizenTools | 4.8 | Jun 12 | Citizen allows stored XSS in menu heading message |
| CVE-2025-49575 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jun 12 | Citizen allows stored XSS in Command Palette tip messages |
| CVE-2025-49577 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jun 12 | Citizen allows stored XSS in preference menu headings |
| CVE-2025-21612 | ME mediawiki-extensions-TabberNeue StarCitizenTools | 8.6 | Jan 6 | Cross-site Scripting in TabberTransclude in Extension:TabberNeue |
| CVE-2024-47536 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Sep 30 | starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field |
| CVE-2024-36123 | ME mediawiki-skins-Citizen StarCitizenTools | 5.4 | Jun 3 | Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline |