CVE-2025-52558 | THREATINT

Description

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4

Reserved 2025-06-18 | Published 2025-06-23 | Updated 2025-06-23 | Assigner GitHub_M

HIGH: 7.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

< 0.50.4

affected

References

github.com/...ion.io/security/advisories/GHSA-hwpg-x5hw-vpv9

github.com/...ommit/3d5a544ea674cfce517adcd498877a8d760d0931

cve.org (CVE-2025-52558)

nvd.nist.gov (CVE-2025-52558)

Download JSON