← All advisories

Medium severity4.8NVD Advisory· Published Jul 1, 2026· Updated Jul 9, 2026

CVE-2026-58034

CVE-2026-58034

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser.

This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/blockConnectedTempAccountsField.Vue.

This issue affects CheckUser: from 1.46.0-rc.0 before 1.46.0.

Affected products

2

MediaWiki/Mediawiki
cpe:2.3:a:mediawiki:mediawiki:1.46.0:rc0:*:*:*:*:*:*
Wikimedia Foundation/CheckUserllm-fuzzy
Range: from 1.46.0-rc.0 before 1.46.0

Patches

Vulnerability mechanics

References

1

phabricator.wikimedia.org/T428820nvdPermissions Required

News mentions

0

No linked articles in our index yet.