[MEDIUM] starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field

PKSA-vbrv-zfnd-b9m6 CVE-2024-47536 GHSA-62r2-gcxr-426x

Affected package: starcitizentools/citizen-skin

Affected version: >=2.6.3,<2.31.0

Reported by:
GitHub