Login Request a demo
Medium severity · published Sep 30, 2024
CVE-2024-47536
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
5.4
CVSS
0.5%
EPSS
No
On KEV
Description
Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their name can XSS themselves by setting their "real name" to an XSS payload. This vulnerability is fixed in 2.31.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
mediawiki-skins-Citizen · StarCitizenTools
>= 2.6.3, < 2.31.0 · source: vendor, CISA
CI
Citizen · Starcitizen.tools
before 2.31.0 · source: NVD
Affected product
ME
mediawiki-skins-Citizen
StarCitizenTools
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-47536
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-47536
Product
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/blob/d45c3d69f30863f622f16eb40dd41d3ca943454a/includes/Components/CitizenComponentUserInfo.php#L137
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/717d16af35b10dab04d434aefddbf991fc8c168c
Patch
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/86da3e07718c8d8da6f4310386fef85599606f9b
Exploit
https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-62r2-gcxr-426x
More from mediawiki-skins-Citizen
6.5
CVE-2025-62508
Citizen vulnerable to stored XSS in sticky header button messages
5.4
CVE-2025-53370
Citizen stored XSS vulnerability through short descriptions
5.4
CVE-2025-53368
Citizen is vulnerable to stored XSS attack in the legacy search bar
5.4
CVE-2025-49576
Citizen allows stored XSS in search no result messages
5.4
CVE-2025-49578
Citizen allows stored XSS in user registration date message