Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js.
This issue affects CheckUser: from * before 1.44.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wikimedia Foundation | CheckUser | < 1.44.1 | 1.44.1 |
Advisories 1
- WID-SEC-2025-2198 MediaWiki: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 1, 2026