CVE Feed

    Dashboard / CVE / CVE-2025-52558

    CVE-2025-52558

    changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4

    Published:Jun 23, 2025
    Last Modified:Apr 15, 2026
    EPS:Jun 23, 2025
    EPSS Score:0.00037
    CVSS Score:7

    Affected Products

    Vendor
    Dgtlmoon
    Product
    Changedetection.io

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-71205 (CVSS 6.5) — changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with …
    CVE-2026-71204 (CVSS 6.2) — changedetection.io's /settings save handler builds an update dict from form.data['application'] and blind-merg…
    CVE-2026-71203 (CVSS 5.3) — changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller'…
    CVE-2026-43891 (CVSS 7.5) — changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is…
    CVE-2026-41895 (CVSS 8.2) — changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpath_filter()…
    CVE-2026-35490 (CVSS 9.8) — changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @login_optionall…
    CVE-2026-35000 (CVSS 7.1) — ChangeDetection.io versions prior to 0.54.7 contain a protection bypass vulnerability in the SafeXPath3Parser …
    CVE-2026-33981 (CVSS 8.3) — changedetection.io is a free open source web page change detection tool. Prior to 0.54.7, the `jq:` and `jqraw…
    CVE-2026-29065 (CVSS 8.8) — changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip v…
    CVE-2026-29039 (CVSS 8.8) — changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changede…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High