Lucene search
Shopify: H1514 DOMXSS on Embedded SDK via Shopify.API.setWindowLocation abusing cookie Stuffing
H1514 DOMXSS on Embedded SDK via Shopify.API.setWindowLocation abusing cookie Stuffing. Attacker can abuse flaws in the Shopify Embedded SDK to execute a DOMXSS attack via cookie stuffing and login CSRF, allowing them to hijack the session and perform unauthorized actions
Show more
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo10 Oct 2018 09:31Current
6.2Medium risk
Vulners AI Score6.2