XSS at importing Product List

How it was found

steps t reproduce:

goto https://blahblah.myshopify.com/admin/products

click on Import Products and upload the file in attachment and you will be able to trigger XSS