CVE-2025-53479
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-07-08

Last updated on: 2025-07-10

Assigner: wikimedia-foundation

Description
The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. This message is rendered without proper escaping, making it possible to inject JavaScript through the uselang=x-xss language override mechanism. This issue affects Mediawiki - CheckUser extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-08
Last Modified
2025-07-10
Generated
2026-05-07
AI Q&A
2025-07-08
EPSS Evaluated
2026-05-05
NVD
CVE-2025-53479
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a reflected Cross-Site Scripting (XSS) issue in the CheckUser extension of Mediawiki. Specifically, the Special:CheckUser interface improperly handles the rev-deleted-user message by not escaping it correctly. This allows an attacker to inject malicious JavaScript code through the uselang=x-xss language override mechanism, which can then be executed in the context of the user's browser.


How can this vulnerability impact me? :

The vulnerability can allow attackers to execute arbitrary JavaScript in the context of the affected Mediawiki site. This can lead to session hijacking, theft of sensitive information, defacement, or other malicious actions performed on behalf of the user, potentially compromising user accounts and site integrity.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart