CVE-2023-24769

2023-02-1700:00:00

mitre

www.cve.org

changedetection.io

xss

vulnerability

url parameter

web scripts

0.001 Low

EPSS

Percentile

28.9%

JSON

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the “Add a new change detection watch” function.