PT-2025-4300 · Unknown · Tabberneue

Name of the Vulnerable Software and Affected Versions: TabberNeue versions prior to 2.7.2 Description: The issue arises from unescaped user input being used to construct HTML, allowing any user who can edit pages or render wikitext to perform cross-site scripting XSS attacks on other users...

TabberNeue 跨站脚本漏洞

TabberNeue is an extension to StarCitizen.tools open source. It allows the Wiki to create tabs on pages. A cross-site scripting vulnerability exists in versions prior to TabberNeue 2.7.2, which stems from TabberTransclude.php not escaping user-supplied page names on output...