HexBrain

Shopify · Report #54321

Xss in website's link

Validstatus
5upvotes
13 May 2015disclosed

How it was found

Hi,

I found Xss in my website's link.

Steps:

Go to this page https://app.shopify.com/services/partners/account/edit In fileld "Website (optional)" add javascript:alert(document.cookie);//http://dgddfgdfgg.ua and save

Need registration https://experts.shopify.com/signup

After we can see account. Click link website

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original