CVE-2023-49150

Name of the Vulnerable Software and Affected Versions Crypto Converter Widget versions n/a through 1.8.1

Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting'. This allows for Stored XSS in the Crypto Converter Widget.

Recommendations For versions n/a through 1.8.1, update to a version later than 1.8.1 to resolve the issue. As a temporary workaround, consider restricting access to the Crypto Converter Widget until a patch is available. Avoid using the Crypto Converter Widget in sensitive environments until the issue is resolved. At the moment, there is no information about additional mitigation measures.