CVE-2023-1270: Cross-site Scripting in btcpayserver/btcpayserver
Published Mar 8, 2023
·Updated
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.
Affected Software
1 affected component
btcpayserver btcpayserver<1.8.3
Remediation
Event History
Mar 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for Cross-site Scripting in GitHub repository btcpayserver/btcpayserver?
The vulnerability ID for Cross-site Scripting in GitHub repository btcpayserver/btcpayserver is CVE-2023-1270.
2
What is the severity rating of CVE-2023-1270?
CVE-2023-1270 has a severity rating of 5.4 (medium).
3
How does Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3 occur?
Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3 occurs due to inadequate input validation and sanitization of user-supplied data.
4
What is the affected software by CVE-2023-1270?
The affected software by CVE-2023-1270 is Btcpayserver Btcpayserver prior to version 1.8.3.
5
How can I fix Cross-site Scripting in GitHub repository btcpayserver/btcpayserver?
To fix Cross-site Scripting in GitHub repository btcpayserver/btcpayserver, update to version 1.8.3 or later.