CVE-2021-24679: Coinmarketstats Bitcoin / Altcoin Payment Gateway For Woocommerce

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

Affected products

• Coinmarketstats Bitcoin / Altcoin Payment Gateway For Woocommerce: before 1.6.1 (fixed in 1.6.1)

Published 2021-10-04. Last modified 2026-06-17.