6.1 Medium

CVE-2023-1546 The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes,…

Description

The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

Affected products and versions

Product	Affected versions	Fixed in
MyCryptoCheckout 2.124	earliest → < 2.124	2.124

Do you use MyCryptoCheckout?

Track this CVE Watch MyCryptoCheckout Check my SBOMs

www.cveye.io/en/cve/CVE-2023-1546

Timeline

Published May 2, 2023
Last modified January 30, 2025

References

wpscan.com wpscan.com

Track this CVE