mediawiki-skins-Citizen — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in mediawiki-skins-Citizen, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-62508	Citizen vulnerable to stored XSS in sticky header button messages CWE-79	6.5	Medium	2025-10-17
CVE-2025-53370	Citizen stored XSS vulnerability through short descriptions CWE-79	8.6	High	2025-07-03
CVE-2025-53368	Citizen is vulnerable to stored XSS attack in the legacy search bar CWE-79	8.6	High	2025-07-03
CVE-2025-49576	Citizen allows stored XSS in search no result messages CWE-79	6.5	Medium	2025-06-12
CVE-2025-49578	Citizen allows stored XSS in user registration date message CWE-79	6.5	Medium	2025-06-12
CVE-2025-49579	Citizen allows stored XSS in menu heading message CWE-79	6.5	Medium	2025-06-12
CVE-2025-49575	Citizen allows stored XSS in Command Palette tip messages CWE-79	6.5	Medium	2025-06-12
CVE-2025-49577	Citizen allows stored XSS in preference menu headings CWE-79	6.5	Medium	2025-06-12
CVE-2024-47536	starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field CWE-80	5.4	-	2024-09-30
CVE-2024-36123	Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline CWE-79	6.5	Medium	2024-06-03

All 10 known CVE vulnerabilities affecting mediawiki-skins-Citizen with full Chinese analysis, references, and POCs where available.