Vulnerabilities in StarCitizenTools
14 resultsCVE-2022-21710MEDIUMCross-site Scripting in ShortDescription extensionEPSS 1.0%CVE-2025-21612HIGHCross-site Scripting in TabberTransclude in Extension:TabberNeueEPSS 0.5%CVE-2024-36123MEDIUMCitizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:TaglineEPSS 0.5%CVE-2024-47536MEDIUMstarcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" fieldEPSS 0.4%CVE-2025-62508MEDIUMCitizen vulnerable to stored XSS in sticky header button messagesEPSS 0.4%CVE-2025-53093HIGHTabberNeue vulnerable to Stored XSS through wikitextEPSS 0.4%CVE-2025-49575MEDIUMCitizen allows stored XSS in Command Palette tip messagesEPSS 0.4%CVE-2025-49578MEDIUMCitizen allows stored XSS in user registration date messageEPSS 0.4%CVE-2025-49576MEDIUMCitizen allows stored XSS in search no result messagesEPSS 0.4%CVE-2025-49577MEDIUMCitizen allows stored XSS in preference menu headingsEPSS 0.4%CVE-2025-49579MEDIUMCitizen allows stored XSS in menu heading messageEPSS 0.3%CVE-2025-53370HIGHCitizen stored XSS vulnerability through short descriptionsEPSS 0.3%CVE-2025-53369HIGHCitizen Short Description stored XSS vulnerability through wikitextEPSS 0.3%CVE-2025-53368HIGHCitizen is vulnerable to stored XSS attack in the legacy search barEPSS 0.3%