CVE-2023-0493

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

Input validation

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

CVE-2023-0493

CVE-2023-0493 applies to BTCPay Server (btcpayserver/btcpayserver) prior to 1.7.5. The issue is Improper Neutralization of Equivalent Special Elements leading to HTML injection in BTCPay Server v1.7.4 and earlier. Affected component: BTCPayServer (server-side HTML label/input handling). Documente...

CVE-2023-0493 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

PT-2023-16305 · Unknown · Btcpay Server

Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.7.5 Description: The issue is related to improper neutralization of equivalent special elements. This affects the GitHub repository btcpayserver/btcpayserver. Recommendations: For versions prior t...

CVE-2023-0493 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5...

CVE-2021-3830

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3830

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3830

CVE-2021-3830 affects btcpayserver, with an XSS vulnerability caused by Improper Neutralization of Input During Web Page Generation. The CVE listing notes it as a Stored XSS in btcpayserver/btcpayserver; other connected records describe the general vulnerability but do not provide concrete fixes ...

CVE-2021-3830 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3646

The CVE-2021-3646 entry concerns btcpayserver and is validated by multiple connected records showing a Cross-site Scripting (XSS) flaw caused by improper neutralization of input during web page generation. The Huntr entry provides a concrete PoC: an XSS payload triggered when editing and saving t...

CVE-2021-3646 Cross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver

✍️ Description XSS payload is triggered during editing and saving text included near the payment button. 🕵️‍♂️ Proof of Concept " In the app, settings try editing already included product. drop the payload in the Buy Button Text and save it hence the payload will be triggered. 💥 Impact Execution of...

Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

✍️ Description stored xss bug via link in store 🕵️‍♂️ Proof of Concept 1. goto https://mainnet.demo.btcpayserver.org/stores and create a store .\ 2. Now open that store using url https://mainnet.demo.btcpayserver.org/stores/BuBNcrh8vpu4sMcTikqXoP5pXU49hvoFDyqAoA46Tns2 and change website link to...