CVE-2025-21612

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2...

TabberNeue cross-site scripting vulnerabilities

TabberNeue is an extension to StarCitizen.tools open source. It allows the Wiki to create tabs on pages. A cross-site scripting vulnerability exists in versions prior to TabberNeue 2.7.2, which stems from TabberTransclude.php not escaping user-supplied page names on output...

CVE-2025-21612: Improper Neutralization of Input During Web Page Generation

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2...