Unknown · Changedetection.Io · CVE-2025-52558
Name of the Vulnerable Software and Affected Versions:
changedetection.io versions prior to 0.50.4
Description:
The issue is related to a cross-site scripting (XSS) vulnerability due to errors in filters from website page change detection watches not being properly filtered. This vulnerability has been patched in version 0.50.4.
Recommendations:
For versions prior to 0.50.4, update to version 0.50.4 to resolve the issue. As a temporary workaround, consider restricting access to the filter functionality until the update is applied.