GitHub Advisoryadvisory · PyPI

GHSA-hwpg-x5hw-vpv9 ChangeDetection.io XSS in watch overview

HIGH Published 2025-06-23 Modified 2025-06-27 Official page ↗

Aliases: CVE-2025-52558
Ecosystem: PyPI
Packages: changedetection.io
Severity: High
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-79
Reviewed: 2025-06-23

Affected packages

• PyPI changedetection.io: < 0.50.4 → fixed in 0.50.4

Description

Impact XSS - Errors in filters from website page change detection watches were not being filtered. Patches 0.50.4

Related

Alias · CVE (1)

CVE-2025-52558 changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. vulnerability

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References