Skip to content
CVE PROGRAM SOURCE RECORD1.3 Low

CVE-2025-53904

The Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) Vulnerability

Description

The Scratch Channel is a news website that is under development as of time of this writing. The file `/api/admin.js` contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The-Scratch-Channel the-scratch-channel.github.io

  • <= b66a1cae45e05ad8971aecd96c3322520f8a5725affected

References