A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2020-07-02T18:35:21

Updated: 2024-08-04T09:56:26.921Z

Reserved: 2020-01-28T00:00:00

Link: CVE-2020-8176

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-07-02T19:15:12.590

Modified: 2024-11-21T05:38:26.590

Link: CVE-2020-8176

cve-icon Redhat

No data.