Medium severity6.1NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026

CVE-2021-24679

Description

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Bitcoin / AltCoin Payment Gateway for WooCommercellm-create
Range: <1.6.1
Coinmarketstats/Bitcoin \/ Altcoin Payment Gateway For Woocommerce
cpe:2.3:a:coinmarketstats:bitcoin_\/_altcoin_payment_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*
Range: <1.6.1
WordPress/Woo Altcoin Payment Gatewayinferred
Range: <1.6.1
Package: https://wordpress.org/plugins/woo-altcoin-payment-gateway

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/7c6c0aac-1733-4abc-8e95-05416636a127nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000