CVE-2025-55301mediumCWE-20

CVE-2025-55301: medium-severity vulnerability in the-scratch-channel.github.io

The Scratch Channel Allows Username Modification

Published

Follow this CVE+ Monitor the-scratch-channel.github.io

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.2%
The Scratch Channel is a news website. In version 1, it is possible to go to application in devtools and click local storage to edit the account's username locally. This issue has been patched in version 1.1.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
The-Scratch-Channel · the-scratch-channel.github.io
Related CVEs — the-scratch-channel.github.io

In the same product, most dangerous first.

CVE-2025-53904LOWThe Scratch Channel Has Potential Reflected Cross-Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2025-53903LOWThe Scratch Channel Has Potential Cross-Site Scripting (XSS) VulnerabilityEPSS 0.4%