CVE-2021-3830 LOW

CVE-2021-3830: Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver

Vendor Btcpayserver
Product btcpayserver/btcpayserver
Weakness CWE-79 · XSS
Published September 26, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

3.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Key dates

02Disclosure timeline

September 26, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-38345 Brizy <= 1.0.125 and 1.0.127 – 2.3.11 Incorrect authorization checks allowing Post modification CVE-2025-9715 O2OA Personal Profile script cross site scripting CVE-2023-25711 WordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS) CVE-2022-20637 Cisco Security Manager Cross-Site Scripting Vulnerabilities CVE-2023-34183 WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)