https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T02:24:38.188335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5651 EUVD-2026-5651 2026-10-05T02:24:38.190929+00:00 EUVD-2026-5651 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36123 fkie_cve-2024-36123 2026-10-05T02:24:38.190969+00:00

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML (including Javascript) can be injected by someone with the ability to edit the MediaWiki namespace (typically those with the `editinterface` permission, or sysops). This vulnerability is fixed in 2.16.0.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-36123 UBUNTU-CVE-2024-36123 2026-10-05T02:24:38.191001+00:00

Affected: Ubuntu:18.04:LTS: mediawiki, Ubuntu:Pro:20.04:LTS: mediawiki, Ubuntu:Pro:22.04:LTS: mediawiki, Ubuntu:Pro:24.04:LTS: mediawiki, Ubuntu:25.10: mediawiki, Ubuntu:26.04:LTS: mediawiki

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML (including Javascript) can be injected by someone with the ability to edit the MediaWiki namespace (typically those with the `editinterface` permission, or sysops). This vulnerability is fixed in 2.16.0.