Embedvideo
Approved changes feed: RSS · Atom
cpe:2.3:a:star-citizen:embedvideo:*:*:*:*:*:mediawiki:*:*part: a version: * update: *
| Vendor | Star Citizen (693b51a3-4b58-5443-9f16-80b6a03a284d) |
|---|---|
| Product | Embedvideo (dd871efe-b269-52b8-8d50-e824fae51bce) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | mediawiki |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-59839 |
vulnerable | 2026-06-08 07:35:23.300118 |
Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes
HIGH (8.6)
The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for stored XSS through wikitext. This issue has been patched via commit 4e075d3.
Published: 2025-09-25T13:56:13.804Z
Updated: 2025-09-25T14:19:53.153Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.