AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-53479

MEDIUM · CVSS 5.4 EPSS 0.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-07-08 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java.

CVE
CVE-2025-53479
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%
Java

Original NVD Description

The CheckUser extension’s Special:CheckUser interface is vulnerable to reflected XSS via the rev-deleted-user message. This message is rendered without proper escaping, making it possible to inject JavaScript through the uselang=x-xss language override mechanism. This issue affects Mediawiki - CheckUser extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.