Executive brief
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
Affected products
- Packagist starcitizenwiki/embedvideo
Junglewise Threat Intelligence
CVE-2025-59839: Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
CVE-2025-59839 · Severity: low · CVSS 3.1 · Published 2025-09-24
Technologies: starcitizenwiki/embedvideo (Packagist). Vendors: Packagist.
Related threats
- The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips
- The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips
- The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips
- The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips