Please do not report security vulnerabilities through public GitHub issues.
Instead, please report all vulnerability privately here.
You should receive a response within 24 hours.
A new release will be cut once the vulnerability is fixed.
Security: StarCitizenTools/mediawiki-skins-Citizen
Security
SECURITY.md
-
Stored XSS through short descriptionsGHSA-prmv-7r8c-794g published
Jul 3, 2025 by alistair3149High -
Stored XSS in the legacy search bar through page descriptionsGHSA-rq6g-6g94-jfr4 published
Jul 3, 2025 by alistair3149High -
Stored XSS in menu heading messageGHSA-g3cp-pq72-hjpv published
Jun 11, 2025 by alistair3149Moderate -
Stored XSS in user registration date messageGHSA-2v3v-3whp-953h published
Jun 11, 2025 by alistair3149Moderate -
Stored XSS in preference menu heading messagesGHSA-jwr7-992g-68mh published
Jun 11, 2025 by alistair3149Moderate -
Stored XSS in search no result messagesGHSA-86xf-2mgp-gv3g published
Jun 11, 2025 by alistair3149Moderate -
Stored XSS in Command Palette tip messagesGHSA-4c2h-67qq-vm87 published
Jun 11, 2025 by alistair3149Moderate -
Stored, self-XSS in the "real name" fieldGHSA-62r2-gcxr-426x published
Sep 28, 2024 by alistair3149Moderate -
Stored XSS by editing MediaWiki:TaglineGHSA-jhm6-qjhq-5mf9 published
Jun 1, 2024 by alistair3149Moderate
Learn more about advisories related to StarCitizenTools/mediawiki-skins-Citizen in the GitHub Advisory Database