CVE-2024-36123

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page "MediaWiki:Tagline" has its contents used unescaped, so custom HTML including Javascript can be injected by someone with the ability to edit the MediaWiki namespace typically those with the "editinterface"...

CVE-2024-36123 Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page MediaWiki:Tagline has its contents used unescaped, so custom HTML including Javascript can be injected by someone with the ability to edit the MediaWiki namespace typically those with the editinterface...

PT-2024-26910

Name of the Vulnerable Software and Affected Versions Citizen versions prior to 2.16.0 Description The Citizen MediaWiki skin is affected by an issue where the page MediaWiki:Tagline has its contents used unescaped, allowing custom HTML including Javascript to be injected by someone with the...

CVE-2024-36123: Improper Neutralization of Input During Web Page Generation

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The page MediaWiki:Tagline has its contents used unescaped, so custom HTML including Javascript can be injected by someone with the ability to edit the MediaWiki namespace typically those with the editinterface...