Reflected XSS in chat.

Disclosed: 2015-09-02 16:43:15 By dz_samir To shopify
Unknown
Vulnerability Details
hello login in the chat and upload file with Payload name (code injection) like <img src="c" onerror=alert(1)> the code html will execute <span>You are not allowed to upload '<img src="c" onload="alert(1)">' files, allowed types: jpg, jpeg, gif, png</span> Hadji Samir
Actions
View on HackerOne
Report Stats
  • Report ID: 81757
  • State: Closed
  • Substate: resolved
  • Upvotes: 3
Share this report