CVE-2024-34061

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. In affected versions Input in parameter notification_urls is not processed resulting in javascript execution in the application. A reflected XSS vulnerability happens when the user input from a URL or POST data is reflected on the page without being stored, thus allowing the attacker to inject malicious content. This issue has been addressed in version 0.45.22. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-79

• https://github.com/dgtlmoon/changedetection.io/commit/c0f000b1d1ce03733460805dbbedde445fe2c762
• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-pwgc-w4x9-gw67
• https://github.com/dgtlmoon/changedetection.io/commit/c0f000b1d1ce03733460805dbbedde445fe2c762
• https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-pwgc-w4x9-gw67

Published

May 2, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-34051A Reflected Cross-site scripting (XSS) vulnerability located…4.6
• CVE-2024-34055Cyrus IMAP before 3.8.3 and 3.10.x before 3.10.0-rc1 allows …6.5
• CVE-2024-34057Triangle Microworks TMW IEC 61850 Client source code librari…7.5
• CVE-2024-34058The WebTop package for NethServer 7 and 8 allows stored XSS …8.8
• CVE-2024-3406The WP Prayer WordPress plugin through 2.0.9 does not have C…8.8
• CVE-2024-34060IrisEVTXModule is an interface module for Evtx2Splunk and Ir…8.8
• CVE-2024-34062tqdm is an open source progress bar for Python and CLI. Any …4.8
• CVE-2024-34063vodozemac is an implementation of Olm and Megolm in pure Rus…2.5
• CVE-2024-34064Jinja is an extensible templating engine. The `xmlattr` filt…5.4
• CVE-2024-34065Strapi is an open-source content management system. By combi…8.1
• CVE-2024-34066Pterodactyl wings is the server control plane for Pterodacty…8.4
• CVE-2024-34067Pterodactyl is a free, open-source game server management pa…6.1