Mezereon Smart Search & Filter Shopify 安全漏洞

Mezereon Smart Search & Filter Shopify is a filter software from Mezereon USA. A security vulnerability exists in Mezereon Smart Search & Filter Shopify version 1.0, which stems from vulnerability to cross-site scripting attacks...

Malicious code in shopify_security_base (npm)

The package shopifysecuritybase was found to contain malicious code...

Shopify: Preview bar: Incomplete message origin validation results in XSS

The JavaScript code at https://cdn.shopify.com/s/assets/storefront/bars/previewbarinjector-73a4756a265c637c998799750759ae548e7f68b136e8e93e83132904afc3d30d.js loaded by the shop front when a theme is previewed installs a message event listener. The following check is used to reject invalid event...