Login Request a demo
CI
Product
Citizen
by Starcitizen.tools · last CVE Jul 3, 2025
9
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 0Medium 9Low 0
Severity
All severities9Critical0High0Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Citizen to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53370
5.4
0%
Jul 3
Citizen stored XSS vulnerability through short descriptions
Affected: 1.9.4 before 3.4.0
CVE-2025-53368
5.4
0%
Jul 3
Citizen is vulnerable to stored XSS attack in the legacy search bar
Affected: 1.9.4 before 3.4.0
CVE-2025-49576
5.4
0%
Jun 12
Citizen allows stored XSS in search no result messages
Affected: before 3.3.1
CVE-2025-49578
5.4
0%
Jun 12
Citizen allows stored XSS in user registration date message
Affected: before 3.3.1
CVE-2025-49575
5.4
0%
Jun 12
Citizen allows stored XSS in Command Palette tip messages
Affected: before 3.3.1
CVE-2025-49577
5.4
0%
Jun 12
Citizen allows stored XSS in preference menu headings
Affected: before 3.3.1
CVE-2024-47536
5.4
0%
Sep 30
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Affected: before 2.31.0
CVE-2024-36123
5.4
0%
Jun 3
Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline
Affected: before 2.16.0
CVE-2025-49579
4.8
0%
Jun 12
Citizen allows stored XSS in menu heading message
Affected: before 3.3.1
Showing 9