Home > Vulnerability Database > CVE-2025-53904

Mend.io Vulnerability Database

CVE-2025-53904

Date: July 16, 2025

The Scratch Channel is a news website that is under development as of time of this writing. The file "/api/admin.js" contains code that could make the website vulnerable to cross-site scripting. No known patches exist as of time of publication.

Severity Score

0.0

Related Resources (4)

Url: https://github.com/The-Scratch-Channel/the-scratch-channel.github.io/blob/main/api/admin.js#L18

Url: https://github.com/The-Scratch-Channel/the-scratch-channel.github.io/security/advisories/GHSA-hgh4-pj74-f5rr

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-53904

Url: https://www.mend.io/vulnerability-database/CVE-2025-53904

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

Incomplete Denylist to Cross-Site Scripting

CWE-692

CVSS v3.1

Base Score:	0.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	NONE