Medium severity6.1NVD Advisory· Published Feb 3, 2026· Updated Apr 9, 2026
CVE-2025-61648
CVE-2025-61648
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js.
This issue affects CheckUser: from * before 1.44.1.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- phabricator.wikimedia.org/T402077nvdPermissions Required
News mentions
0No linked articles in our index yet.