CVE-2025-53480

The Mediawiki - CheckUser extension is vulnerable to reflected Cross-Site Scripting (XSS) in the Account information tab of the Special:Investigate page. The root cause is the improper escaping of specific internationalized messages during rendering. Attackers can trigger this by appending ?usela...