How many StarCitizenTools citizen CVEs are in CISA KEV?

None of StarCitizenTools citizen's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of StarCitizenTools citizen are affected?

8 distinct StarCitizenTools citizen versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in StarCitizenTools citizen CVEs?

StarCitizenTools citizen's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of StarCitizenTools citizen CVEs?

The average CVSS base score across StarCitizenTools citizen's scored CVEs is 6.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

StarCitizenTools

9 CVEs

StarCitizenTools citizen Vulnerabilities

Name: StarCitizenTools citizen vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for citizen by StarCitizenTools.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

9

Public exploits

PoC or exploit code

6.8

Avg CVSS

2024–2025

Last updated July 3, 2025

Overview

StarCitizenTools citizen has 9 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting StarCitizenTools citizen, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of StarCitizenTools citizen's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of StarCitizenTools citizen's CVEs are currently listed in CISA's KEV catalog.

Public exploits

9

9 of StarCitizenTools citizen's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every StarCitizenTools citizen version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.3.15 CVEs
1.9.4 <= v < 3.4.02 CVEs
< 2.16.01 CVE
< 2.31.01 CVE

Fixed in

3.3.15 CVEs
3.4.02 CVEs
2.16.01 CVE
2.31.01 CVE

Find a version

9 CVEs

Sort

Citizen stored XSS vulnerability through short descriptions
CVE-2025-53370
Public exploit
Patch
CWE-79
High · CVSS 8.6
EPSS 0.3% (23th pct)2025-07-03
Citizen is vulnerable to stored XSS attack in the legacy search bar
CVE-2025-53368
Public exploit
Patch
CWE-79
High · CVSS 8.6
EPSS 0.3% (21th pct)2025-07-03
Citizen allows stored XSS in search no result messages
CVE-2025-49576
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (28th pct)2025-06-12
Citizen allows stored XSS in user registration date message
CVE-2025-49578
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (28th pct)2025-06-12
Citizen allows stored XSS in menu heading message
CVE-2025-49579
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.3% (27th pct)2025-06-12
Citizen allows stored XSS in Command Palette tip messages
CVE-2025-49575
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (28th pct)2025-06-12
Citizen allows stored XSS in preference menu headings
CVE-2025-49577
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.4% (28th pct)2025-06-12
starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field
CVE-2024-47536
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.4% (36th pct)2024-09-30
Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline
CVE-2024-36123
Public exploit
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.5% (38th pct)2024-06-03

Common weakness types

The CWE weakness categories most often found in StarCitizenTools citizen CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')9 CVEs

Disclosure activity by year

How many StarCitizenTools citizen CVEs were published each year.

2024

2

2025

7

Other StarCitizenTools products

Browse vulnerabilities for other products by StarCitizenTools.

mediawiki-skins-Citizen10 CVEs starcitizentools/citizen-skin9 CVEs mediawiki-extensions-ShortDescription2 CVEs mediawiki-extensions-TabberNeue2 CVEs starcitizentools/tabber-neue2 CVEs starcitizentools/short-description1 CVEs

All StarCitizenTools vulnerabilities

Frequently asked questions

Common questions about StarCitizenTools citizen vulnerabilities.

How many CVEs does StarCitizenTools citizen have?: StarCitizenTools citizen has 9 published CVE records since 2024.
How many StarCitizenTools citizen CVEs are in CISA KEV?: None of StarCitizenTools citizen's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for StarCitizenTools citizen vulnerabilities?: Yes — 9 of StarCitizenTools citizen's CVEs have a known public exploit.
Which versions of StarCitizenTools citizen are affected?: 8 distinct StarCitizenTools citizen versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in StarCitizenTools citizen CVEs?: StarCitizenTools citizen's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of StarCitizenTools citizen CVEs?: The average CVSS base score across StarCitizenTools citizen's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track StarCitizenTools citizen vulnerabilities

Monitor new StarCitizenTools citizen vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing