Shopify: Xss in website's link

2015-04-02T00:16:27
ID H1:54321
Type hackerone
Reporter ragnar
Modified 2015-05-13T19:26:39

Description

Hi,

I found Xss in my website's link.

Steps:

Go to this page https://app.shopify.com/services/partners/account/edit In fileld "Website (optional)" add javascript:alert(document.cookie);//http://dgddfgdfgg.ua and save

Need registration https://experts.shopify.com/signup

After we can see account. Click link website