Wikimedia Foundation MediaWiki - Checkuser Extension

3 CVEs affecting Wikimedia Foundation MediaWiki - Checkuser Extension. Latest disclosed: 2025-07-08. Critical: 0, High: 0.

Top CVEs affecting Wikimedia Foundation MediaWiki - Checkuser Extension
CVESeverityScorePublishedSummary
CVE-2025-53479Medium5.42025-07-08The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. This message is rendered without proper…
CVE-2025-53480Medium5.42025-07-08The CheckUser extension’s Special:Investigate page has a vulnerability in the Account information tab, where specific internationalized messages are rendered w…
CVE-2025-53478Medium5.42025-07-07The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certain internationalized system messages re…