Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/09/09 10:38 a.m.17 views

Shopify: XSS in SHOPIFY: Unsanitized Supplier Name can lead to XSS in Transfers Timeline

Hello I would like to report an XSS happening in Transfer Timeline because the Supplier Name input is not sanitized as it should! POC Set Supplier Name to " Create a Transfer with multiple items and cancel on of the items. Review the timeline In the timeline you will see You canceled items in a...

SaveExploits0
Rows per page
Query Builder