What’s Vulnerable › Products

Wikimedia Foundation Mediawiki - CheckUser extension vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Wikimedia Foundation Mediawiki - CheckUser extension version is affected

Latest Wikimedia Foundation Mediawiki - CheckUser extension vulnerabilities

• CVE-2025-53479 — CheckUser: Reflected Cross-Site Scripting (XSS) in Special:CheckUser via unsanitized internationalized message (CVSS 5.4)
• CVE-2025-53480 — CheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate (Account information tab) via unsanitized i18n messages (CVSS 5.4)
• CVE-2025-53478 — CheckUser: Reflected Cross-Site Scripting (XSS) in Special:Investigate via unsanitized i18n messages (CVSS 5.4)