high7.0
CVE-2025-52558
ChangeDetection.io XSS in watch overview
Impact
### Impact XSS - Errors in filters from website page change detection watches were not being filtered. ### Patches 0.50.4
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | changedetection.io | <= 0.50.3 | 0.50.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/dgtlmoon/changedetection.io/commit/3d5a544ea674cfce517adcd498877a8d760d0931
- https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-hwpg-x5hw-vpv9
- https://github.com/advisories/GHSA-hwpg-x5hw-vpv9
- https://nvd.nist.gov/vuln/detail/CVE-2025-52558