Starcitizentools
14 CVEs across 3 Starcitizentools products. Browse Starcitizentools vulnerabilities, severities, and proof-of-concept exploits.
Starcitizentools products with known CVEs
Starcitizentools CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-62508 | Medium | 6.5 | 2025-10-17 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Citizen from 3.3.0 to 3.9.0 are vulnerable to stored cross-site scripting in… |
CVE-2025-53370 | High | 8.6 | 2025-07-03 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, short descriptions set via the ShortDes… |
CVE-2025-53369 | High | 8.6 | 2025-07-03 | Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized befor… |
CVE-2025-53368 | High | 8.6 | 2025-07-03 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. From versions 1.9.4 to before 3.4.0, page descriptions are inserted into raw… |
CVE-2025-53093 | High | 8.6 | 2025-06-27 | TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HT… |
CVE-2025-49579 | Medium | 6.5 | 2025-06-12 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings using the Menu.mustache template are in… |
CVE-2025-49578 | Medium | 6.5 | 2025-06-12 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by `Language::userDate` are inserted into raw… |
CVE-2025-49577 | Medium | 6.5 | 2025-06-12 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various preferences messages are inserted into raw HTML, allowing anybody wh… |
CVE-2025-49576 | Medium | 6.5 | 2025-06-12 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title and citizen-search-noresults-desc system… |
CVE-2025-49575 | Medium | 6.5 | 2025-06-12 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Multiple system messages are inserted into the CommandPaletteFooter as raw H… |
CVE-2025-21612 | High | 8.6 | 2025-01-06 | TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when o… |
CVE-2024-47536 | Medium | 5.4 | 2024-09-30 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their na… |
CVE-2024-36123 | Medium | 6.5 | 2024-06-03 | Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML… |
CVE-2022-21710 | Medium | 4.7 | 2022-01-24 | ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting (XSS) vulnerability exists in versions prior to… |