79 matches found
Cross site scripting
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...
CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...
CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...
CVE-2023-1270
CVE-2023-1270 affects BTCPayServer/btcpayserver prior to 1.8.3 with Cross-site Scripting (XSS) via the Display title input in the client/server workflow. PoCs show injecting {{alert(document.location)}} can execute scripts, indicating a client‑side script injection vulnerability. Remediation freq...
PT-2023-16851 · Unknown · Btcpay Server
Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.8.3 Description: The issue concerns Cross-site Scripting and Command Injection in the GitHub repository btcpayserver/btcpayserver. Recommendations: For versions prior to 1.8.3, update to version...
Improper Neutralization of Equivalent Special Elements
Overview Affected versions of this package are vulnerable to Improper Neutralization of Equivalent Special Elements due to improper user input validation, which allows HTML injection in the forms/Address page fields. Remediation Upgrade BTCPayServer.Client to version 1.7.3 or higher. References -...
CVE-2023-1149
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...
CVE-2023-1149 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...
CVE-2023-1149 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...
CVE-2023-1149
CVE-2023-1149 concerns btcpayserver/btcpayserver before version 1.8.0, due to improper neutralization of equivalent special elements. The connected Huntr entry documents a stored HTML injection vulnerability in the payment request workflow (Request payment / Request customer data / shipping addre...
CVE-2023-1149 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0...
CVE-2023-0879
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
CVE-2023-0879
CVE-2023-0879 is a stored XSS in BTCPayServer prior to version 1.7.12. Multiple sources (NVD/NVD-derived entries, Red Hat, CNNVD, OSV, PRION, and huntr references) confirm the issue as Cross-site Scripting affecting btcpayserver/btcpayserver. The root cause is an XSS vulnerability in the stored d...
PT-2023-16583 · Unknown · Btcpay Server
Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.7.12 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and execut...
CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...
CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
Cross-site Scripting XSS - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12...