Cross-Site Scripting Risk in Citizen MediaWiki Skin

CVE-2025-53368

What is CVE-2025-53368?

The Citizen MediaWiki skin, versions 1.9.4 to lower than 3.4.0, has a vulnerability where it allows inadequate sanitization of page descriptions when utilizing the old search bar. This flaw enables users with editing rights to inject malicious cross-site scripting (XSS) payloads into the Document Object Model (DOM), potentially compromising the security of users interacting with the affected pages. The issue has been rectified in version 3.4.0, emphasizing the importance of updating to secure environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References