CVE-2025-52558: ChangeDetection.io XSS in watch overview
Impact XSS - Errors in filters from website page change detection watches were not being filtered.
Patches
0.50.4
Other sources
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52558?
CVE-2025-52558 has been categorized as a cross-site scripting (XSS) vulnerability, which can potentially allow attackers to inject malicious scripts.
How do I fix CVE-2025-52558?
To fix CVE-2025-52558, upgrade to ChangeDetection.io version 0.50.4 or later where the vulnerability has been addressed.
What versions of ChangeDetection.io are affected by CVE-2025-52558?
CVE-2025-52558 affects all versions of ChangeDetection.io prior to version 0.50.4.
What type of vulnerability is CVE-2025-52558?
CVE-2025-52558 is categorized as a cross-site scripting (XSS) vulnerability.
Can CVE-2025-52558 affect user data on ChangeDetection.io?
Yes, CVE-2025-52558 can potentially allow attackers to manipulate or access user data through injected malicious scripts.