Vulnerabilities

TI-2023-01201 CVE-2023-1270 · GHSA-xfm4-w623-4vcg

Cross-site Scripting in btcpayserver/btcpayserver

LOW 24

Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00351 Published 2023-03-08 Fixed in 1.8.3 CWE-79

TI-2023-00768 CVE-2023-0810 · GHSA-f3fc-w342-3j5r

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00556 Published 2023-02-13 Fixed in 1.7.11 CWE-79

TI-2023-00710 CVE-2023-0748 · GHSA-jvf7-qpqh-8mxh

MEDIUM 64

Open Redirect in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00607 Published 2023-02-08 Fixed in 1.7.6 CWE-601

TI-2023-00709 CVE-2023-0747 · GHSA-rv9f-m2m8-w4mm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00476 Published 2023-02-08 Fixed in 1.7.6 CWE-79