Month: March 2023

BTCPay Server cross-site scripting | CVE-2023-1270

NAME__________BTCPay Server cross-site scriptingPlatforms Affected:Risk Level:5.1Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________BTCPay Server is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A local authenticated attacker could exploit this vulnerability using…