StarCitizenTools vulnerabilities
We track 3 vulnerabilities in StarCitizenTools products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2025.
Latest StarCitizenTools vulnerabilities
- 8.6 High severity
mediawiki-extensions-ShortDescription: Improper Neutralization of Input During Web Page Generation
Short Description is a MediaWiki extension that provides local short description support. In version 4.0.0, short descriptions are not properly sanitized before being inserted as HTML using mw.util.addSubtitle, allowing any user to insert arbitrary HTML into t
- 8.6 High severity
mediawiki-extensions-TabberNeue: Improper Neutralization of Input During Web Page Generation
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `<tabber>` tag. Version 3.1.1
- 8.6 High severity
mediawiki-extensions-TabberNeue: Improper Neutralization of Input During Web Page Generation
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Prior to 2.7.2, TabberTransclude.php doesn't escape the user-supplied page name when outputting, so an XSS payload as the page name can be used here. This vulnerability is fixed in 2.7.2.