CVE-2023-0810

Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

CVSS 8.8 HIGHEPSS 0.6%CWE-79

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

btcpayserver · btcpayserver/btcpayserver

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6 https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68