CNNVD-202507-324 Information
CNNVD ID
CNNVD-202507-324
Related CVE
- CNNVD Published: 2025-07-03
Description (Chinese)
Citizen是Star Citizen Wiki团队的一款美观、易用、响应迅速的MediaWiki皮肤。 Citizen 1.9.4至3.4.0之前版本存在跨站脚本漏洞，该漏洞源于ShortDescription扩展插入的短描述未正确清理，可能导致任意HTML注入。
Description (English)
Citizen is a beautiful, easy-to-use and responsive MediaWiki skin of Star Citizen Wiki’s team. The pre-Citizen 1.9.4 to 3.4.0 version has a cross-site script loophole, which stems from the fact that short descriptions of ShortDescriptions are not correctly cleared and may lead to any type of HTML injection.
Hazard Level
Medium
Vulnerability Type
跨站脚本
Affected Vendor
Star Citizen Wiki
Published
2025-07-03
Last Modified
2026-02-24
References
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases/tag/v3.4.0 https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-prmv-7r8c-794g https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/c85a40bddc8651fff66df83a72debddcb34f0521 https://nvd.nist.gov/vuln/detail/CVE-2025-53370
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases
Share on: