Log in Start free

StarCitizenTools

Products

ProductCVEsExploitedLatest
mediawiki-skins-Citizen10–Oct 17, 2025
mediawiki-extensions-ShortDescription2–Jul 3, 2025
mediawiki-extensions-TabberNeue2–Jun 27, 2025

Exploited and recent CVEs

  • CVE-2025-62508 Medium 6.5 Citizen vulnerable to stored XSS in sticky header button messages 0.4%
  • CVE-2025-53369 High 8.6 Citizen Short Description stored XSS vulnerability through wikitext 0.3%
  • CVE-2025-53370 High 8.6 Citizen stored XSS vulnerability through short descriptions 0.4%
  • CVE-2025-53368 High 8.6 Citizen is vulnerable to stored XSS attack in the legacy search bar 0.4%
  • CVE-2025-53093 High 8.6 TabberNeue vulnerable to Stored XSS through wikitext 0.4%
  • CVE-2025-49576 Medium 6.5 Citizen allows stored XSS in search no result messages 0.4%
  • CVE-2025-49578 Medium 6.5 Citizen allows stored XSS in user registration date message 0.4%
  • CVE-2025-49579 Medium 6.5 Citizen allows stored XSS in menu heading message 0.4%
  • CVE-2025-49575 Medium 6.5 Citizen allows stored XSS in Command Palette tip messages 0.4%
  • CVE-2025-49577 Medium 6.5 Citizen allows stored XSS in preference menu headings 0.4%
  • CVE-2025-21612 High 8.6 Cross-site Scripting in TabberTransclude in Extension:TabberNeue 0.5%
  • CVE-2024-47536 Medium 4.8 starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field 0.5%
  • CVE-2024-36123 Medium 6.5 Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline 0.5%
  • CVE-2022-21710 Medium 4.7 Cross-site Scripting in ShortDescription extension 1.0%