2 matches found
CVE-2020-8176
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the "shop" parameter on the "/shopify/auth/enablecookies" endpoint...
6.1CVSS0.00984EPSS
SaveExploits1References3
CVE-2020-8176: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...
6.1CVSS5.7AI score0.00984EPSS
SaveExploits1References3
20