Lucene search

K
osvGoogleOSV:CVE-2020-8176
HistoryJul 02, 2020 - 7:15 p.m.

CVE-2020-8176

2020-07-0219:15:12
Google
osv.dev
4

AI Score

6

Confidence

High

EPSS

0.001

Percentile

40.7%

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enable_cookies endpoint.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

40.7%

Related for OSV:CVE-2020-8176