CVE-2025-59416: The-Scratch-Channel Tsc-Web-Client

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.

Affected products

• The-Scratch-Channel Tsc-Web-Client: before 1.2 (fixed in 1.2)

Published 2025-09-17. Last modified 2026-06-17.