CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Github Security Blog•added 2021/05/17 9:1 p.m.•66 views

Cross-site scripting in @shopify/koa-shopify-auth

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...

6.1CVSS5.6AI score0.00984EPSS

Exploits1References4Affected Software1

OSV•added 2021/05/17 9:1 p.m.•21 views

GHSA-JQH7-W5PR-CR56 Cross-site scripting in @shopify/koa-shopify-auth

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the shop parameter on the /shopify/auth/enablecookies endpoint...

6.1CVSS5.8AI score0.00984EPSS

Exploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by