CyberRota Analysis
AI-GeneratedThe vulnerability in dgtlmoon Changedetection.io versions up to 0.55.8 affects the Visual Selector component, specifically the setCurrentSelectedText function, allowing for remote cross-site scripting (XSS) attacks through manipulated arguments. Organizations using this software should prioritize upgrading to version 0.60.1 to mitigate the risk of exploitation, as the vulnerability has been publicly disclosed and could be actively targeted.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in dgtlmoon Changedetection.io up to 0.55.8. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.60.1 is capable of addressing this issue. This patch is called aac6fcfa594f17511b8ff73e5eaa4f6c33899de0. It is suggested to upgrade the affected component.