starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
Summary Page descriptions are inserted into raw HTML without proper sanitization by the Citizen skin when using the old search bar. Details The descriptions, which are unsanitized, are inserted as raw HTML:...