CVE-2025-61648 in CheckUserИнформация

Сводка

по MITRE • 03.02.2026

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files modules/ext.CheckUser.TempAccounts/components/ShowIPButton.Vue, modules/ext.CheckUser.TempAccounts/SpecialBlock.Js.

This issue affects CheckUser: from * before 1.44.1.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Wikimedia-foundation

Резервировать

29.09.2025

Раскрытие

03.02.2026

Модерация

принято

Вход

VDB-343895

EPSS

0.00144

KEV

Нет

Деятельности

Очень низкий

Сектор

Lawfirm, Hostingprovider, ...

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-61648
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-61648
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-61648/

◂ ПредыдущийОбзорДалее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!