CVE-2025-57805: The-Scratch-Channel Tsc-Web-Client

High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.

Affected products

• The-Scratch-Channel Tsc-Web-Client: from 1, before 1.2 (fixed in 1.2)

Published 2025-08-25. Last modified 2026-06-17.