CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2021/05/17 9:01 p.m.•88 views

Cross-site scripting in @shopify/koa-shopify-auth

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...

6.1CVSS5.6AI score0.00984EPSS

SaveExploits1References4Affected Software1

OSV•added 2020/07/02 7:15 p.m.•24 views

CVE-2020-8176

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...

6.1CVSS6AI score

SaveExploits0References2

attackerkb•added 2020/07/02 7:15 p.m.•10 views

CVE-2020-8176

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...

6.1CVSS6AI score0.00984EPSS

SaveExploits1References3

Positive Technologies•added 2020/07/02 12:00 a.m.•3 views

PT-2020-20002

Name of the Vulnerable Software and Affected Versions koa-shopify-auth versions 3.1.61 through 3.1.62 Description A cross-site scripting issue exists, allowing an attacker to inject JS payloads into the shop parameter on the "/shopify/auth/enable cookies" endpoint. Recommendations For versions...

6.1CVSS0.00984EPSS

SaveExploits1References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by