PT-2026-5738 · Wikimedia Foundation · Checkuser

Published 2026-02-03 · Updated 2026-02-03 · CVE-2025-61650

Positive Technologies (AI Summary)

CVSS v4.0

1.1

Low

Base vector

AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions Wikimedia Foundation CheckUser versions prior to 795bf333272206a0189050d975e94b70eb7dc507

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, potentially leading to Cross-site Scripting (XSS). The issue is located in the src/Services/CheckUserUserInfoCardService.Php program files.

Recommendations Update to version 795bf333272206a0189050d975e94b70eb7dc507 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-61650

Affected Products

Checkuser

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-61650 · Security Note
• https://phabricator.wikimedia.org/T403289 · Note
• https://twitter.com/CVEnew/status/2018497461845995749 · Twitter Post
• https://t.me/CVEtracker/43535 · Telegram Post