CVE-2021-24679

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24679 Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site Scripting

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24679

The CVE-2021-24679 entry concerns the WordPress plugin “Bitcoin / AltCoin Payment Gateway for WooCommerce” prior to version 1.6.1. The vulnerability is a Reflected Cross-Site Scripting (XSS) in the All Masking Rules page caused by insufficient escaping of the 's' GET parameter before output. Affe...