Shopify: XSS on hardware.shopify.com

This is stored vulnerability for all your users, not only registered or signed in. Vulnerable parameter: propertiesbuilderid at .shopify.com/cart/add The vulnerability is in array levels. When you try something like propertiesbuilderidsecondparameter=value, you will see many corrupted tags in HTM...