High severityOSV Advisory· Published Jun 23, 2025· Updated Apr 15, 2026

CVE-2025-52558

Description

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
changedetection.ioPyPI	< 0.50.4	0.50.4

Affected products

Dgtlmoon/Changedetection.ioOSV
Range: 0.1, 0.11, 0.12, …
ghsa-coords
pkg:pypi/changedetection.io
Range: < 0.50.4

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-hwpg-x5hw-vpv9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-52558ghsaADVISORY
github.com/dgtlmoon/changedetection.io/commit/3d5a544ea674cfce517adcd498877a8d760d0931nvdWEB
github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-hwpg-x5hw-vpv9nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000