Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
starcitizentools/citizen-skin
Composer
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Citizen vulnerable to stored XSS in sticky header button messages
CVE-2025-62508 · GHSA-G955-VW6W-V6PP
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-10-20
Citizen vulnerable to Stored XSS through short descriptions
CVE-2025-53370 · GHSA-PRMV-7R8C-794G
starcitizentools/citizen-skin
Composer
High
Fix reported
2025-07-04
starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
CVE-2025-53368 · GHSA-RQ6G-6G94-JFR4
starcitizentools/citizen-skin
Composer
High
Fix reported
2025-07-04
starcitizentools/citizen-skin allows stored XSS in search no result messages
CVE-2025-49576 · GHSA-86XF-2MGP-GV3G
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-06-13
starcitizentools/citizen-skin allows stored XSS in user registration date message
CVE-2025-49578 · GHSA-2V3V-3WHP-953H
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-06-13
starcitizentools/citizen-skin allows stored XSS in menu heading message
CVE-2025-49579 · GHSA-G3CP-PQ72-HJPV
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-06-13
starcitizentools/citizen-skin allows stored XSS in preference menu heading messages
CVE-2025-49577 · GHSA-JWR7-992G-68MH
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-06-13
Citizen skin vulnerable to stored XSS through multiple system messages
CVE-2025-49575 · GHSA-4C2H-67QQ-VM87
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2025-06-13
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
CVE-2024-47536 · GHSA-62R2-GCXR-426X
starcitizentools/citizen-skin
Composer
Medium
Fix reported
2024-09-30