CheckUser — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in CheckUser, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2023-37252	MediaWiki checkuser 权限许可和访问控制问题漏洞 CWE-669	3.1	Low	2026-09-14
CVE-2026-58034	Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts CWE-79	-	-	2026-07-01
CVE-2026-34090	Suggested investigations: Handle suppressed usernames CWE-200	-	-	2026-05-11
CVE-2025-67478	Wrong E-Mail address composition for usernames with a comma and Umlauts in it like "Döe, Jähn"	9.8^AI	Critical ^AI	2026-02-03
CVE-2025-61658	Special:GlobalContributions shows edits on wikis the viewer doesn't have access to	9.1^AI	Critical ^AI	2026-02-03
CVE-2025-61651	i18n XSS through Special:CheckUser CheckUser helper CWE-79	6.1^AI	Medium ^AI	2026-02-03
CVE-2025-61648	Stored XSS through system messages in CheckUser CWE-79	6.1^AI	Medium ^AI	2026-02-03
CVE-2025-61649	UserInfoCard: Check that performing user has permission to view log entries for number of past blocks	9.1^AI	Critical ^AI	2026-02-03
CVE-2025-61650	UserInfoCard is vulnerable to message key stored XSS CWE-79	6.1^AI	Medium ^AI	2026-02-03
CVE-2025-61647	UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights	9.8^AI	Critical ^AI	2026-02-03

All 10 known CVE vulnerabilities affecting CheckUser with full Chinese analysis, references, and POCs where available.