XSS in Wikimedia Foundation Checkuser

CVE-2025-61650

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Services/CheckUserUserInfoCardService.Php. This issue affects CheckUser: from * before 795bf333272206a0189050d975e94b70eb7dc507.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.002 (16.1th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References