MEDIUM6.5Packagist
GHSA-2v3v-3whp-953h· CVE-2025-49578starcitizentools/citizen-skin allows stored XSS in user registration date message
Modified: 6/13/2025
package
Packagist/starcitizentools/citizen-skin
pkg:packagist/starcitizentools/citizen-skin
MEDIUM6.5Packagist
GHSA-4c2h-67qq-vm87· CVE-2025-49575Citizen skin vulnerable to stored XSS through multiple system messages
Modified: 6/13/2025
MEDIUM4.6Packagist
GHSA-62r2-gcxr-426x· CVE-2024-47536starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Modified: 9/30/2024
MEDIUM6.5Packagist
GHSA-86xf-2mgp-gv3g· CVE-2025-49576starcitizentools/citizen-skin allows stored XSS in search no result messages
Modified: 6/13/2025
MEDIUM6.5Packagist
GHSA-g3cp-pq72-hjpv· CVE-2025-49579starcitizentools/citizen-skin allows stored XSS in menu heading message
Modified: 6/13/2025
MEDIUM6.5Packagist
GHSA-g955-vw6w-v6pp· CVE-2025-62508Citizen vulnerable to stored XSS in sticky header button messages
Modified: 10/20/2025
MEDIUM6.5Packagist
GHSA-jwr7-992g-68mh· CVE-2025-49577starcitizentools/citizen-skin allows stored XSS in preference menu heading messages
Modified: 6/13/2025
HIGH8.6Packagist
GHSA-prmv-7r8c-794g· CVE-2025-53370Citizen vulnerable to Stored XSS through short descriptions
Modified: 7/3/2025
HIGH8.6Packagist
GHSA-rq6g-6g94-jfr4· CVE-2025-53368starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
Modified: 7/3/2025