Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/03/19 9:34 a.m.25 views

Shopify: Stored XSS via "Free Shipping" option (Discounts)

POC steps: 1 Go to the customers page and add a new search group named as "img src=x onerror=prompt7 see img1.png 2 Go to the discounts page, create a new discount code and mark the "Free Shipping" option. 3 Open a web proxy i.e. tamper data and press the "save discount" button. 4 Through the web...

0.4AI score
SaveExploits0
Rows per page
Query Builder