CVE-2023-24769 Information

Description

Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL parameter under the \Add a new change detection watch\ function.

Reference

https://github.com/dgtlmoon/changedetection.io/issues/1358 https://www.youtube.com/watch?v=TRTpRlkU3Hc