CVE-2024-34061 Scanner
CVE-2024-34061 Scanner - Cross-Site Scripting (XSS) vulnerability in Changedetection.io
Used 2.8k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-34061
4.3
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. In affected versions Input in parameter notification_urls is not processed resulting in javascript execution in the application. A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content. This issue has been addressed in version 0.45.22. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
changedetection.io
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: changedetection.io
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →