Starcitizentools vulnerabilities

Products

• Mediawiki-skins-citizen 10
• Mediawiki-extensions-shortdescription 2
• Mediawiki-extensions-tabberneue 2

Newest

• starcitizentools mediawiki-skins-citizen Citizen vulnerable to stored XSS in sticky header button messages CVE-2025-62508 Fix available 6.5 MediumOctober 17, 2025
• starcitizentools mediawiki-extensions-shortdescription Citizen Short Description stored XSS vulnerability through wikitext CVE-2025-53369 Fix available 8.6 HighJuly 3, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen stored XSS vulnerability through short descriptions CVE-2025-53370 Fix available 8.6 HighJuly 3, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen is vulnerable to stored XSS attack in the legacy search bar CVE-2025-53368 Fix available 8.6 HighJuly 3, 2025
• starcitizentools mediawiki-extensions-tabberneue TabberNeue vulnerable to Stored XSS through wikitext CVE-2025-53093 Fix available 8.6 HighJune 27, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen allows stored XSS in search no result messages CVE-2025-49576 Fix available 6.5 MediumJune 12, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen allows stored XSS in user registration date message CVE-2025-49578 Fix available 6.5 MediumJune 12, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen allows stored XSS in menu heading message CVE-2025-49579 Fix available 6.5 MediumJune 12, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen allows stored XSS in preference menu headings CVE-2025-49577 Fix available 6.5 MediumJune 12, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen allows stored XSS in Command Palette tip messages CVE-2025-49575 Fix available 6.5 MediumJune 11, 2025
• starcitizentools mediawiki-extensions-tabberneue Cross-site Scripting in TabberTransclude in Extension:TabberNeue CVE-2025-21612 Fix available 8.6 HighJanuary 6, 2025
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field CVE-2024-47536 Fix available 4.8 MediumSeptember 30, 2024
• starcitizen.tools citizen, starcitizentools mediawiki-skins-citizen +1 more Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline CVE-2024-36123 6.5 MediumJune 3, 2024
• mediawiki shortdescription, starcitizentools mediawiki-extensions-shortdescription +1 more Cross-site Scripting in ShortDescription extension CVE-2022-21710 4.7 MediumJanuary 24, 2022