CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-61648

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js. This issue affects CheckUser: from * before 1.44.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 19.3%

CVSS Severity

CVSS v3 Score 6.1

References

https://phabricator.wikimedia.org/T402077

Products affected by CVE-2025-61648

Mediawiki » Checkuser » Version: 1.19

cpe:2.3:a:mediawiki:checkuser:1.19
Mediawiki » Checkuser » Version: 1.20

cpe:2.3:a:mediawiki:checkuser:1.20
Mediawiki » Checkuser » Version: 1.21

cpe:2.3:a:mediawiki:checkuser:1.21
Mediawiki » Checkuser » Version: 1.22

cpe:2.3:a:mediawiki:checkuser:1.22
Mediawiki » Checkuser » Version: 1.23

cpe:2.3:a:mediawiki:checkuser:1.23
Mediawiki » Checkuser » Version: 1.24

cpe:2.3:a:mediawiki:checkuser:1.24
Mediawiki » Checkuser » Version: 1.25

cpe:2.3:a:mediawiki:checkuser:1.25
Mediawiki » Checkuser » Version: 1.26

cpe:2.3:a:mediawiki:checkuser:1.26
Mediawiki » Checkuser » Version: 1.27

cpe:2.3:a:mediawiki:checkuser:1.27
Mediawiki » Checkuser » Version: 1.28

cpe:2.3:a:mediawiki:checkuser:1.28
Mediawiki » Checkuser » Version: 1.29

cpe:2.3:a:mediawiki:checkuser:1.29
Mediawiki » Checkuser » Version: 1.30

cpe:2.3:a:mediawiki:checkuser:1.30
Mediawiki » Checkuser » Version: 1.31

cpe:2.3:a:mediawiki:checkuser:1.31
Mediawiki » Checkuser » Version: 1.32

cpe:2.3:a:mediawiki:checkuser:1.32
Mediawiki » Checkuser » Version: 1.33

cpe:2.3:a:mediawiki:checkuser:1.33
Mediawiki » Checkuser » Version: 1.34

cpe:2.3:a:mediawiki:checkuser:1.34
Mediawiki » Checkuser » Version: 1.35

cpe:2.3:a:mediawiki:checkuser:1.35

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-61648

Products

Pricing

Contact Us