CVE-2023-1270

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3...

CVE-2023-1270

CVE-2023-1270 affects BTCPayServer/btcpayserver prior to 1.8.3 with Cross-site Scripting (XSS) via the Display title input in the client/server workflow. PoCs show injecting {{alert(document.location)}} can execute scripts, indicating a client‑side script injection vulnerability. Remediation freq...