Arbitrary HTML Insertion Vulnerability in MediaWiki Skin by StarCitizenTools

CVE-2025-53370

What is CVE-2025-53370?

The Citizen MediaWiki skin, spanning versions 1.9.4 to prior to 3.4.0, harbors a security flaw where short descriptions from the ShortDescription extension are directly inserted into the DOM as raw HTML. This allows users to manipulate page content by injecting arbitrary HTML, potentially leading to various attacks such as cross-site scripting (XSS). Users are strongly encouraged to update to version 3.4.0 or later, where this vulnerability has been addressed and patched.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References