CVE-2024-47536

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. A user with the editmyprivateinfo right or who can otherwise change their name can XSS themselves by setting their "real name" to an XSS payload. This vulnerability is fixed in 2.31.0.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79CWE-80

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-475379.8GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by strCVE-2024-475389.8GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handleCVE-2024-475399.8GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convCVE-2024-47545.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business PCVE-2024-475409.8GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identifiCVE-2024-475417.5GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_pCVE-2024-475427.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_reaCVE-2024-475437.5GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_CVE-2024-475447.5GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a nCVE-2024-475457.5GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak fuCVE-2024-475467.5GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data CVE-2024-475479.8Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which lea
CVE-2024-47536: Medium severity, CVSS 5.4 | Vulnix