CVE-2026-95657 | dgtlmoon Changedetection.io up to 0.55.8 Visual Selector visual-selector.js setCurrentSelectedText cross site scripting (GHSA-8m69-92q9-qcxx)

September 22, 2026 Yanac

A vulnerability was found in dgtlmoon Changedetection.io up to 0.55.8 and classified as problematic. This issue affects the function setCurrentSelectedText of the file changedetectionio/static/js/visual-selector.js of the component Visual Selector. Executing a manipulation of the argument s can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-95657. The attack can be launched remotely. Moreover, an exploit is present.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More