Back to Database
Status published
High
CVE-2025-52558
ChangeDetection.io XSS in watch overview
Vulnerability Description
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-52558
Credits & Attribution
No credits recorded in the NVD database.
References
More from dgtlmoon
View All →CVE-2025-62780
changedetection.io vulnerable to stored XSS in Watch update via API
Low
3.5
CVE-2024-56509
changedetection.io has Improper Input Validation Leading to LFR/Path Traversal
High
8.6
CVE-2024-51998
Path traversal using file URI scheme without supplying hostname in changedetection.io
High
8.6
CVE-2024-51483
changedetection.io Path Traversal vulnerability
Medium
6.9
CVE-2024-34061
Reflected cross site scripting in changedetection.io
Medium
4.3
Affected Vendor
dgtlmoon
View all reports →Affected Software
changedetection.io
Vulnerable Versions:
< 0.50.4
Timeline
Official Publish:
June 23rd, 2025
Last Modified:
June 24th, 2025
Added to House:
July 22nd, 2026