Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:23:22 +0000 CVE-2024-36123 — Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline https://cve.radiocsirt.org/vuln/cve-2024-36123 <p><strong>Affected:</strong> StarCitizenTools mediawiki-skins-Citizen</p> <p>Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML (including Javascript) can be injected by someone with the ability to edit the MediaWiki namespace (typically those with the `editinterface` permission, or sysops). This vulnerability is fixed in 2.16.0.</p> <p><strong>Affected:</strong> StarCitizenTools mediawiki-skins-Citizen</p> <p>Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page `MediaWiki:Tagline` has its contents used unescaped, so custom HTML (including Javascript) can be injected by someone with the ability to edit the MediaWiki namespace (typically those with the `editinterface` permission, or sysops). This vulnerability is fixed in 2.16.0.</p> https://cve.radiocsirt.org/vuln/cve-2024-36123