CVE-2025-53370

Packagist/starcitizentools/citizen-skin CVE-2025-53370: high 8.6

Citizen vulnerable to Stored XSS through short descriptions

Action: Upgrade starcitizentools/citizen-skin to 3.4.0 or later.

composer require starcitizentools/citizen-skin:3.4.0

Affected

Fixed versions

Sources

• osv: GHSA-prmv-7r8c-794g
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-prmv-7r8c-794g
• https://nvd.nist.gov/vuln/detail/CVE-2025-53370
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/aedbceb3380bb48db6b59e272fc187529c71c8ca
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/c85a40bddc8651fff66df83a72debddcb34f0521
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen
• https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases/tag/v3.4.0

CVE-2025-53370 · published 2025-07-03T21:29:16Z · modified 2025-07-03T22:27:20.020611Z · JSON