CVE-2023-0810: Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Q: What is CVE-2023-0810?

CVE-2023-0810 is a Cross-site Scripting (XSS) vulnerability that was stored in the GitHub repository btcpayserver/btcpayserver prior to version 1.7.11.

Q: How severe is CVE-2023-0810?

CVE-2023-0810 has a severity level of high with a CVSS score of 5.4.

Q: What software is affected by CVE-2023-0810?

The btcpayserver/btcpayserver repository up to version 1.7.11 is affected by CVE-2023-0810.

Q: How can I fix CVE-2023-0810?

To fix CVE-2023-0810, you should update your btcpayserver installation to version 1.7.11 or higher.

Q: Where can I find more information about CVE-2023-0810?

You can find more information about CVE-2023-0810 in the GitHub commit and the huntr.dev bounty links: [GitHub Commit](https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6), [huntr.dev Bounty](https://huntr.dev/bounties/a48414ea-63d9-453c-b3f3-2c927b71ec68).

Published Feb 13, 2023

Updated

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.11.

Affected Software

1 affected component

btcpayserver btcpayserver<1.7.11

Remediation

Patch Available

https://github.com/btcpayserver/btcpayserver/commit/dffa6accb04df7b80bc584dedef22c9297292ce6

Event History

Feb 13, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-0810?

CVE-2023-0810 is a Cross-site Scripting (XSS) vulnerability that was stored in the GitHub repository btcpayserver/btcpayserver prior to version 1.7.11.

How severe is CVE-2023-0810?

CVE-2023-0810 has a severity level of high with a CVSS score of 5.4.

What software is affected by CVE-2023-0810?