CVE-2026-95657Published
dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-95657 · Microsoft / collected KEV context
cve-program · CVE-2026-95657
- https://vuldb.com/vuln/408413
- https://vuldb.com/vuln/408413/cti
- https://vuldb.com/cve/CVE-2026-95657
- https://vuldb.com/submit/896587
- https://github.com/herantong/cve/blob/main/changedetection.io_xss-visual-selector_CWE-79
- https://github.com/dgtlmoon/changedetection.io/pull/4282
- https://github.com/dgtlmoon/changedetection.io/commit/aac6fcfa594f17511b8ff73e5eaa4f6c33899de0
- https://github.com/dgtlmoon/changedetection.io/releases/tag/0.60.1
- https://github.com/dgtlmoon/changedetection.io/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.