CVE-2025-49576 – Citizen is a MediaWiki skin that makes extensions

June 12, 2025

CVE ID : CVE-2025-49576

Published : June 12, 2025, 7:15 p.m. | 2 hours, 46 minutes ago

Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This vulnerability is fixed in 3.3.1.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-49577 – Citizen is a MediaWiki skin that makes extensions

Next Article CVE-2025-49081 – There is an insufficient input validation vulnerab

Highlights

CVE-2025-3858 – WordPress Formality Plugin Stored Cross-Site Scripting Vulnerability

May 2, 2025

CVE ID : CVE-2025-3858

Published : May 2, 2025, 4:15 a.m. | 3 hours, 5 minutes ago

Description : The Formality plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.5.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Severity: 6.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

Subnautica 2 publisher Krafton reportedly delayed it to 2026 — did it just kill a $250 million bonus for devs in the crib?

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-49576 – Citizen is a MediaWiki skin that makes extensions

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks

CVE-2025-47896 – VMware Remote Code Execution

Ubuntu 24.04 e le vulnerabilità nei Namespace non privilegiati: cosa sapere

Sam Altman says people have a high degree of trust in ChatGPT, even though it hallucinates: “It should be the tech that you don’t trust that much”

Mastering Databricks Jobs API: Build and Orchestrate Complex Data Pipelines

CVE-2025-3858 – WordPress Formality Plugin Stored Cross-Site Scripting Vulnerability

Introduction to MCP: The Ultimate Guide to Model Context Protocol for AI Assistants

Top Ways Hackers Exploit Web Applications (and How to Prevent Them)

Gemini Robotics brings AI into the physical world

CVE-2025-49576 – Citizen is a MediaWiki skin that makes extensions

Related Posts