CVE-2025-49576 – Citizen is a MediaWiki skin that makes extensions

CVE ID : CVE-2025-49576

Published : June 12, 2025, 7:15 p.m. | 28 minutes ago

Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This vulnerability is fixed in 3.3.1.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Go to Source