CVE-2025-62508
1 advisory.
Packagist/starcitizentools/citizen-skin CVE-2025-62508: medium 6.5
Citizen vulnerable to stored XSS in sticky header button messages
Action: Upgrade starcitizentools/citizen-skin to 3.9.0 or later.
composer require starcitizentools/citizen-skin:3.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.3.0 | 3.9.0 | - |
Fixed versions
| 3.9.0 |
Sources
- osv: GHSA-g955-vw6w-v6pp
- https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-g955-vw6w-v6pp
- https://nvd.nist.gov/vuln/detail/CVE-2025-62508
- https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/e006923c6dbf113c9a025ca186ecc09fe7b93a15
- https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/fbb1d4fe9627281567706f3f6fc99a42ce16fdc4
- https://github.com/StarCitizenTools/mediawiki-skins-Citizen
CVE-2025-62508 · published · modified · JSON