Back to Database
Status published
Low
CVE-2025-53903
The Scratch Channel Has Potential Cross-Site Scripting (XSS) Vulnerability
Vulnerability Description
The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/users.js` doesn't properly sanitize text box inputs, leading to a potential vulnerability to cross-site scripting attacks. Commit 90b39eb56b27b2bac29001abb1a3cac0964b8ddb addresses this issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53903
Credits & Attribution
No credits recorded in the NVD database.
References
More from The-Scratch-Channel
View All →CVE-2025-59416
The Scratch Channel forks can publish articles
High
7.2
CVE-2025-57805
The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation
High
8.7
CVE-2025-55301
The Scratch Channel Allows Username Modification
Medium
6.7
CVE-2025-53904
The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability
Low
1.3
Affected Vendor
The-Scratch-Channel
View all reports →Affected Software
the-scratch-channel.github.io
Vulnerable Versions:
< 90b39eb56b27b2bac29001abb1a3cac0964b8ddb
Timeline
Official Publish:
July 15th, 2025
Last Modified:
July 15th, 2025
Added to House:
July 22nd, 2026