XSS in SHOPIFY: Unsanitized Supplier Name can lead to XSS in Transfers Timeline

跨站脚本 / XSS（通用） / #167075

厂商

Shopify

严重程度

未评级

赏金

—

弱点

XSS（通用）

研究员

@nismo

披露日期

2016-09-19

资产

—

CVE

—

该报告还没有中文解读。

I would like to report an XSS happening in Transfer Timeline because the Supplier Name input is not sanitized as it should!