CVE-2025-53904
The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability
The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.
Reserved 2025-07-11 | Published 2025-07-16 | Updated 2025-07-16 | Assigner GitHub_MCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-692: Incomplete Denylist to Cross-Site Scripting
github.com/...hub.io/security/advisories/GHSA-hgh4-pj74-f5rr
github.com/...ratch-channel.github.io/blob/main/api/admin.js
Support options
