Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/01/23 11:22 p.m.21 views

Shopify: [h1-2102] Stored XSS in product description via `productUpdate` GraphQL query leads to XSS at handshake-web-internal.shopifycloud.com/products/[ID]

This is most likely going to be a duplicate, so I'll keep it short. A stored cross site scripting vulnerability exists at handshake-web-internal.shopifycloud.com through the product description field. Recruirements A shop with the Handshake plugin enabled and set-up Reproduction steps 1. Add a...

0.2AI score
SaveExploits0
Rows per page
Query Builder