CVE-2023-0879: Btcpayserver Btcpay Server

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12.

Affected products

• Btcpayserver Btcpay Server: before 1.7.12 (fixed in 1.7.12)

Published 2023-02-17. Last modified 2026-06-17.