CNNVD-202506-1703 Information
CNNVD ID
CNNVD-202506-1703
Related CVE
- CNNVD Published: 2025-06-12
Description (Chinese)
Citizen是Star Citizen Wiki团队的一款美观、易用、响应迅速的MediaWiki皮肤。 Citizen 3.3.1之前版本存在跨站脚本漏洞，该漏洞源于Menu.mustache模板中的菜单标题插入原始HTML，可能导致任意HTML注入。
Description (English)
Citizen is a beautiful, easy-to-use and responsive MediaWiki skin of Star Citizen Wiki’s team. The pre-Citizen 3.3.1 version had a cross-site script loophole, which originated from the insertion of the original HTML in the menu title in the Menu.mustache template, which could result in any type of HTML injection.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Star Citizen Wiki
Published
2025-06-12
Last Modified
2026-02-24
References
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-g3cp-pq72-hjpv https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/93c36ac778397e0e7c46cf7adb1e5d848265f1bd https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/54c8717d45ce1594918f11cb9ce5d0ccd8dfee65 https://access.redhat.com/security/cve/cve-2025-49579 https://nvd.nist.gov/vuln/detail/CVE-2025-49579
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases
Share on: