https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:09:46.747785+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-49578 CVE-2025-49578 — Citizen allows stored XSS in user registration date message 2026-10-10T21:09:46.764626+00:00

Affected: StarCitizenTools mediawiki-skins-Citizen

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by `Language::userDate` are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This impacts wikis where a group has the `editinterface` but not the `editsitejs` user right. This vulnerability is fixed in 3.3.1.