{"id":"CVE-2025-52558","aliases":["GHSA-hwpg-x5hw-vpv9","PYSEC-2026-1241"],"title":"ChangeDetection.io XSS in watch overview","summary":"ChangeDetection.io XSS in watch overview","severity":"high","vendor":"changedetection-io","product":"changedetection-io","ecosystem":"pip","affected":["changedetection-io < 0.50.4"],"patched":["changedetection-io 0.50.4"],"published":"2025-06-23","updated":"2026-07-07","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-hwpg-x5hw-vpv9","references":[{"url":"https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-hwpg-x5hw-vpv9"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52558"},{"url":"https://github.com/dgtlmoon/changedetection.io/commit/3d5a544ea674cfce517adcd498877a8d760d0931"},{"url":"https://github.com/dgtlmoon/changedetection.io"}],"tags":["osv","pip"],"epss":0.00594,"epssPercentile":0.46055,"ingestedAt":"2026-07-08T18:25:50.331Z","slug":"CVE-2025-52558","body":"## Overview\n\n### Impact\nXSS - Errors in filters from website page change detection watches were not being filtered.\n\n### Patches\n\n0.50.4\n\n## Affected packages\n\n- `changedetection-io < 0.50.4`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `changedetection-io 0.50.4`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}