CNNVD-202506-1698 Information
CNNVD ID
CNNVD-202506-1698
Related CVE
- CNNVD Published: 2025-06-12
Description (Chinese)
Citizen是Star Citizen Wiki团队的一款美观、易用、响应迅速的MediaWiki皮肤。 Citizen 3.3.1之前版本存在跨站脚本漏洞，该漏洞源于CommandPaletteFooter中插入原始HTML，可能导致任意HTML注入。
Description (English)
Citizen is a beautiful, easy-to-use and responsive MediaWiki skin of Star Citizen Wiki’s team. The pre-Citizen 3.3.1 version had a cross-site script loophole, which originated from the insertion of the original HTML in CommandPalitteFooter and could result in any type of HTML injection.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Star Citizen Wiki
Published
2025-06-12
Last Modified
2026-02-24
References
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-4c2h-67qq-vm87 https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/4fa69e1d062dca7e407cc0530cf1da3e2baaf0b5 https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd https://access.redhat.com/security/cve/cve-2025-49575 https://nvd.nist.gov/vuln/detail/CVE-2025-49575
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases
Share on: