{"action":"Upgrade starcitizentools/citizen-skin to 3.4.0 or later.","affected":[{"fixed":"3.4.0","introduced":"1.9.4"}],"component":"starcitizentools/citizen-skin","cve_ids":["CVE-2025-53368"],"ecosystem":"Packagist","epss":0.00341,"exploited":false,"fixed_versions":["3.4.0"],"ghsa_id":"GHSA-rq6g-6g94-jfr4","id":"tcs_01M5KF8FS2C6BFGRQCD2ETNZ8D","modified_at":"2025-07-03T22:19:53.807674Z","published_at":"2025-07-03T20:29:08Z","references":["https://osv.dev/vulnerability/GHSA-rq6g-6g94-jfr4","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-rq6g-6g94-jfr4","https://nvd.nist.gov/vuln/detail/CVE-2025-53368","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/commit/aedbceb3380bb48db6b59e272fc187529c71c8ca","https://github.com/StarCitizenTools/mediawiki-skins-Citizen","https://github.com/StarCitizenTools/mediawiki-skins-Citizen/releases/tag/v3.4.0"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-rq6g-6g94-jfr4","url":"https://osv.dev/vulnerability/GHSA-rq6g-6g94-jfr4"}],"summary":"starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions"}