📦 Citizen

This vulnerability allows authenticated users with page editing privileges to inject malicious scripts into the Citizen MediaWiki skin's search results. When other users search for specific pages, the...

This vulnerability allows any user to inject arbitrary HTML into web pages by editing page content when using the Citizen skin with ShortDescription extension. This affects MediaWiki installations usi...

This CVE describes a cross-site scripting (XSS) vulnerability in the Citizen MediaWiki skin where system messages are inserted as raw HTML without proper sanitization. Attackers who can edit these spe...

This is a cross-site scripting (XSS) vulnerability in the Citizen MediaWiki skin where date messages from Language::userDate are inserted into raw HTML without proper sanitization. Attackers with edit...