CVE-2025-53480

The CheckUser extension’s Special:Investigate page has a vulnerability in the Account information tab, where specific internationalized messages are rendered without proper escaping. Attackers can exploit this by appending ?uselang=x-xss to the URL, causing reflected XSS when the UI renders...

CVE-2025-53480

The Mediawiki - CheckUser extension is vulnerable to reflected Cross-Site Scripting (XSS) in the Account information tab of the Special:Investigate page. The root cause is the improper escaping of specific internationalized messages during rendering. Attackers can trigger this by appending ?usela...