Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25807
HistoryJul 03, 2020 - 3:55 a.m.

Cross-site Scripting (XSS)

2020-07-0303:55:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

40.7%

@shopify/koa-shopift-auth is vulnerable to cross-site scripting (XSS). The vulnerability exists as it did not sanitize the values of shop in auth/client/request-storage-access.ts, auth/client/top-level-interaction.ts, create-enable-cookies.ts, create-request-storage-access.ts.

EPSS

0.001

Percentile

40.7%

Related for VERACODE:25807