Shopify · Report #54321
Xss in website's link
Validstatus
5upvotes
13 May 2015disclosed
How it was found
Hi,
I found Xss in my website's link.
Steps:
Go to this page https://app.shopify.com/services/partners/account/edit In fileld "Website (optional)" add javascript:alert(document.cookie);//http://dgddfgdfgg.ua and save
Need registration https://experts.shopify.com/signup
After we can see account. Click link website