---
id: CVE-2026-92814
title: >-
  changedetection.io through 0.60.6 fails to escape the scraped page title in
  HTML notifications, allowing arbitrary markup injection
summary: >-
  changedetection.io through 0.60.6 fails to escape the scraped page title in
  HTML notifications, allowing arbitrary markup injection. Attackers can place
  malicious markup in monitored page titles that reaches notification channels
  like em…
severity: medium
cvss: 4.2
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N'
cwe:
  - CWE-79
vendor: dgtlmoon
product: changedetection.io
affected:
  - changedetection.io <= 0.60.6
published: '2026-09-16'
updated: '2026-09-22'
sourceUpdated: '2026-09-22T20:53:07.383'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92814'
references:
  - url: 'https://github.com/dgtlmoon/changedetection.io'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/dgtlmoon/changedetection.io/blob/0.60.6/changedetectionio/notification/handler.py#L400-L414
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/geo-chen/oss/blob/main/changedetection.io.md#finding-1-stored-htmlmarkup-injection-into-html-notifications-via-scraped-page-title-watch_title-not-in-the-escape-set
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/changedetection-io-through-0.60.6-cross-site-scripting-via-watch-title
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00296
epssPercentile: 0.19827
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-17T18:41:21.371951Z'
ingestedAt: '2026-09-16T21:05:36.882Z'
---

## Overview

changedetection.io through 0.60.6 fails to escape the scraped page title in HTML notifications, allowing arbitrary markup injection. Attackers can place malicious markup in monitored page titles that reaches notification channels like email and Telegram as live content when the watch_title token is used in templates.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.