Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/12/25 9:16 p.m.22 views

Shopify: Stored XSS in /admin/orders

Hi , I have found a Stored XSS vulnerability in orders page. Steps to reproduce: 1. Create a new order with an item that requires shipping 2. Go to https://.myshopify.com/admin/orders/ 3. Click the Fulfill items button then fulfill the items 4. Now a new fulfillment with an id will be generated ,...

5.9AI score
SaveExploits0
Rows per page
Query Builder