Shopify: Reflected XSS in AI Chat Bot Greetings at help.shopify.com via Markdown Image Rendering

A reflected XSS vulnerability was reported in the AI chat bot greetings at help.shopify.com. The issue was caused by the rendering of a markdown image in the greeting, which allowed the attacker to inject a payload through the image URL. The vulnerability was addressed by removing the...