CVE-2025-52558

Description

### Impact XSS - Errors in filters from website page change detection watches were not being filtered. ### Patches 0.50.4

How to fix CVE-2025-52558

To remediate CVE-2025-52558, upgrade the affected package to a fixed version below.

• PyPI/changedetection-io—upgrade to 0.50.4 or later

Is CVE-2025-52558 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 0.50.4

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-52558
• PATCHgithub.com/dgtlmoon/changedetection.io
• WEBgithub.com/dgtlmoon/changedetection.io/commit/3d5a544ea674cfce517adcd498877a8d760d0931
• WEBgithub.com/dgtlmoon/changedetection.io/security/advisories/GHSA-hwpg-x5hw-vpv9