{"action":"Upgrade starcitizentools/citizen-skin to 2.31.0 or later.","affected":[{"fixed":"2.31.0","introduced":"2.6.3"}],"component":"starcitizentools/citizen-skin","cve_ids":["CVE-2024-47536"],"ecosystem":"Packagist","epss":0.0046,"exploited":false,"fixed_versions":["2.31.0"],"ghsa_id":"GHSA-62r2-gcxr-426x","id":"tcs_01M5KEWJ1G2ZQ70KQRBEECKDYK","modified_at":"2024-09-30T20:26:23.850872Z","published_at":"2024-09-30T17:48:33Z","references":["https://osv.dev/vulnerability/GHSA-62r2-gcxr-426x","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-62r2-gcxr-426x","https://nvd.nist.gov/vuln/detail/CVE-2024-47536","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/717d16af35b10dab04d434aefddbf991fc8c168c","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/86da3e07718c8d8da6f4310386fef85599606f9b","https://github.com/StarCitizenTools/mediawiki-skins-Citizen","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/blob/d45c3d69f30863f622f16eb40dd41d3ca943454a/includes/Components/CitizenComponentUserInfo.php#L137"],"severity":{"label":"medium","score":4.6},"sources":[{"source":"osv","source_id":"GHSA-62r2-gcxr-426x","url":"https://osv.dev/vulnerability/GHSA-62r2-gcxr-426x"}],"summary":"starcitizentools/citizen-skin vulnerable to stored, self-XSS in the \"real name\" field"}