2 matches found
GHSA-HWPG-X5HW-VPV9 ChangeDetection.io XSS in watch overview
Impact XSS - Errors in filters from website page change detection watches were not being filtered. Patches 0.50.4...
7CVSS5.8AI score0.00594EPSS
SaveExploits0References4
CVE-2024-32651
changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection SSTI in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction...
10CVSS8.5AI score0.85256EPSS
SaveExploits5References1
20