Vulnerabilities in StarCitizenTools
14 resultsVexday analysis
StarCitizenTools apresenta 14 vulnerabilidades catalogadas, predominantemente do tipo injeção de código (CWE-79), porém nenhuma apresenta atividade explorada em campanha conhecida nem classificação crítica. O portfólio de risco mostra-se estável, sem novas exposições nos últimos 90 dias, sugerindo um cenário de vulnerabilidades históricas sem pressão exploratória imediata.
CVE-2022-21710MEDIUMCross-site Scripting in ShortDescription extensionEPSS 1.0%CVE-2025-21612HIGHCross-site Scripting in TabberTransclude in Extension:TabberNeueEPSS 0.5%CVE-2024-36123MEDIUMCitizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:TaglineEPSS 0.5%CVE-2024-47536MEDIUMstarcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" fieldEPSS 0.5%CVE-2025-62508MEDIUMCitizen vulnerable to stored XSS in sticky header button messagesEPSS 0.4%CVE-2025-49578MEDIUMCitizen allows stored XSS in user registration date messageEPSS 0.4%CVE-2025-49575MEDIUMCitizen allows stored XSS in Command Palette tip messagesEPSS 0.4%CVE-2025-49577MEDIUMCitizen allows stored XSS in preference menu headingsEPSS 0.4%CVE-2025-49576MEDIUMCitizen allows stored XSS in search no result messagesEPSS 0.4%CVE-2025-49579MEDIUMCitizen allows stored XSS in menu heading messageEPSS 0.4%CVE-2025-53093HIGHTabberNeue vulnerable to Stored XSS through wikitextEPSS 0.4%CVE-2025-53370HIGHCitizen stored XSS vulnerability through short descriptionsEPSS 0.3%CVE-2025-53368HIGHCitizen is vulnerable to stored XSS attack in the legacy search barEPSS 0.3%CVE-2025-53369HIGHCitizen Short Description stored XSS vulnerability through wikitextEPSS 0.3%