CVE-2020-XXXX - BTCPay (XSS to leaked private key)

XSS which leads to a leaked private key allowing wallet control