PT-2020-20002

Name of the Vulnerable Software and Affected Versions koa-shopify-auth versions 3.1.61 through 3.1.62 Description A cross-site scripting issue exists, allowing an attacker to inject JS payloads into the shop parameter on the "/shopify/auth/enable cookies" endpoint. Recommendations For versions...