CNNVD-202506-1701 Information
CNNVD ID
CNNVD-202506-1701
Related CVE
- CNNVD Published: 2025-06-12
Description (Chinese)
Citizen是Star Citizen Wiki团队的一款美观、易用、响应迅速的MediaWiki皮肤。 Citizen 3.3.1之前版本存在跨站脚本漏洞，该漏洞源于偏好设置消息插入原始HTML，可能导致任意HTML注入。
Description (English)
Citizen is a beautiful, easy-to-use and responsive MediaWiki skin of Star Citizen Wiki’s team. The pre-Citizen 3.3.1 version had a cross-site script loophole, which stemmed from preference setting messages inserting the original HTML, which could result in any type of HTML injection.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Star Citizen Wiki
Published
2025-06-12
Last Modified
2026-02-24
References
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-jwr7-992g-68mh https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/a741639085d70c22a9f49890542a142a223bf981 https://access.redhat.com/security/cve/cve-2025-49577 https://nvd.nist.gov/vuln/detail/CVE-2025-49577
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases
Share on: