Alexia E. Smith

1 exploit Active since Jun 2025
CVE-2025-53093 WRITEUP HIGH WRITEUP
StarCitizenTools TabberNeue 3.0.0-3.1.0 - Stored Cross-Site Scripting via Tabber Tag Attribute Injection
TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the `<tabber>` tag. Version 3.1.1 contains a patch for the bug.
CVSS 8.6