CurrencyRate.today — Vulnerabilities & Security Advisories 4

CurrencyRate.today provides real-time currency exchange rate data through its API and web platform. Historically, the service has been affected by multiple cross-site scripting (XSS) vulnerabilities and remote code execution (RCE) flaws, often stemming from improper input validation and insecure API endpoints. The platform has demonstrated inconsistent security practices, with at least four CVEs recorded, including issues allowing unauthorized access and data manipulation. While no major public security incidents have been widely reported, the recurring nature of these vulnerabilities suggests potential weaknesses in their development lifecycle and security testing procedures.