StarCitizenTools

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

StarCitizenTools records in CISA KEV

No StarCitizenTools vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Citizen 9 records HIGH

Records

9 records in Citizen · all components

TI-2025-33330 CVE-2025-53368 · GHSA-rq6g-6g94-jfr4

Citizen is vulnerable to stored XSS attack in the legacy search bar

HIGH 76

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0035 Published 2025-07-03 Fixed in 3.4.0 CWE-79

TI-2025-33332 CVE-2025-53370 · GHSA-prmv-7r8c-794g

Citizen stored XSS vulnerability through short descriptions

HIGH 70

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00386 Published 2025-07-03 Fixed in 3.4.0 CWE-79

TI-2024-23953 CVE-2024-36123

Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline

MEDIUM 64

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00472 Published 2024-06-03 Fixed in 2.16.0 CWE-79

TI-2025-31592 CVE-2025-49579 · GHSA-g3cp-pq72-hjpv

Citizen allows stored XSS in menu heading message

MEDIUM 62

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00409 Published 2025-06-12 Fixed in 93c36ac778397e0e7c46cf7adb1e5d848265f1bd, 3.3.1 CWE-79

TI-2025-31591 CVE-2025-49578 · GHSA-2v3v-3whp-953h

Citizen allows stored XSS in user registration date message

MEDIUM 62

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00426 Published 2025-06-12 Fixed in 93c36ac778397e0e7c46cf7adb1e5d848265f1bd, 3.3.1 CWE-79

TI-2025-31590 CVE-2025-49577 · GHSA-jwr7-992g-68mh

Citizen allows stored XSS in preference menu headings

MEDIUM 62

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00425 Published 2025-06-12 Fixed in 3.3.1 CWE-79

TI-2025-31589 CVE-2025-49576 · GHSA-86xf-2mgp-gv3g

Citizen allows stored XSS in search no result messages

MEDIUM 62

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00425 Published 2025-06-12 Fixed in 3.3.1 CWE-79

TI-2025-31588 CVE-2025-49575 · GHSA-4c2h-67qq-vm87

Citizen allows stored XSS in Command Palette tip messages

MEDIUM 62

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00425 Published 2025-06-12 Fixed in 93c36ac778397e0e7c46cf7adb1e5d848265f1bd, 3.3.1 CWE-79

TI-2024-31825 CVE-2024-47536 · GHSA-62r2-gcxr-426x

starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field

MEDIUM 55

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0046 Published 2024-09-30 Fixed in 2.31.0 CWE-79

Open these records in search →