VYPR
Unrated severityNVD Advisory· Published Jul 1, 2026· Updated Jul 1, 2026

Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts

CVE-2026-58034

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue.

This issue affects CheckUser: from 1.46.0-rc.0 before 1.46.0.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.