CVE-2025-52558
CVE-2025-52558 · ChangeDetection.io XSS in watch overview
This page contains facts from public vulnerability sources. Check the original advisory before updating.
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4
CVSS 7.0 · High · EPSS 0.6% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
changedetection.io
- Versions
- < 0.50.4: Affected
No fix published
changedetection-io PyPI
- Versions
- 0.38.2
- 0.39
- 0.39.1
- 0.39.10
- 0.39.10.post1
- 0.39.10.post2
- 0.39.11
- 0.39.12
- 0.39.13
- 0.39.13.1
- 0.39.14
- 0.39.14.1
- 0.39.15
- 0.39.16
- 0.39.17
- 0.39.17.1
- 0.39.17.2
- 0.39.18
- 0.39.19
- 0.39.19.1
- 0.39.2
- 0.39.20
- 0.39.20.1
- 0.39.20.2
- 0.39.20.3
- 0.39.20.4
- 0.39.21
- 0.39.21.1
- 0.39.22
- 0.39.22.1
- 0.39.3
- 0.39.4
- 0.39.5
- 0.39.6
- 0.39.7
- 0.39.8
- 0.39.9
- 0.40.0
- 0.40.0.1
- 0.40.0.2
- 0.40.0.3
- 0.40.0.4
- 0.40.1.0
- 0.40.1.1
- 0.40.2
- 0.40.3
- 0.41
- 0.41.1
- 0.42
- 0.42.1
- 0.42.2
- 0.42.3
- 0.43.1
- 0.43.2
- 0.44
- 0.44.1
- 0.45
- 0.45.1
- 0.45.11
- 0.45.12
- 0.45.13
- 0.45.14
- 0.45.15
- 0.45.16
- 0.45.17
- 0.45.18
- 0.45.19
- 0.45.2
- 0.45.20
- 0.45.21
- 0.45.22
- 0.45.23
- 0.45.24
- 0.45.25
- 0.45.26
- 0.45.3
- 0.45.4
- 0.45.5
- 0.45.6
- 0.45.7
- 0.45.7.1
- 0.45.7.2
- 0.45.7.3
- 0.45.8
- 0.45.8.1
- 0.45.9
- 0.46.0
- 0.46.1
- 0.46.2
- 0.46.3
- 0.46.4
- 0.47.0
- 0.47.1
- 0.47.2
- 0.47.3
- 0.47.4
- 0.47.5
- 0.47.6
- 0.48.0
- 0.48.1
- 0.48.2
- 0.48.3
- 0.48.4
- 0.48.5
- 0.48.6
- 0.49.0
- 0.49.1
- 0.49.10
- 0.49.12
- 0.49.13
- 0.49.14
- 0.49.15
- 0.49.16
- 0.49.17
- 0.49.18
- 0.49.2
- 0.49.3
- 0.49.4
- 0.49.5
- 0.49.6
- 0.49.7
- 0.49.8
- 0.49.9
- 0.50.1
- 0.50.2
- 0.50.3
- Affected ranges
- ECOSYSTEM: < 0.50.4
Update to 0.50.4