Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/07/17 2:22 p.m.16 views

Shopify: Staff who only have apps and channels permission can do a takeover account at the wholesale store (Bypass get invitation link)

When we invite customers at the wholesale store there is a feature to "Send invite" and "Get invite link" the get invite link feature displays the customner invitation link and can only be used once, but when the customer has accepted the invitation and actived their account already have access t...

6.7AI score
SaveExploits0
Rows per page
Query Builder