Executive brief
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
Affected products
- Packagist starcitizentools/citizen-skin
Junglewise Threat Intelligence
CVE-2024-47536: starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
CVE-2024-47536 · Severity: low · CVSS 3.1 · Published 2024-09-30
Technologies: starcitizentools/citizen-skin (Packagist). Vendors: Packagist.
Related threats
- Citizen vulnerable to stored XSS in sticky header button messages
- Citizen vulnerable to Stored XSS through short descriptions
- starcitizentools/citizen-skin is vulnerable to Stored XSS attack in the legacy search bar through page descriptions
- starcitizentools/citizen-skin allows stored XSS in user registration date message
- starcitizentools/citizen-skin allows stored XSS in menu heading message