CVE-2024-23168
Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution.
More information : https://github.com/Xiexe/XSOverlay-Issue-Tracker