← CVE Intelligence

CVE-2020-8176

n/a / koa-shopify-auth PUBLISHED

Description (CNA)

A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.

Affected (CNA)

Vendor / productVersions
n/a / koa-shopify-authaffected Impacted: v3.1.61-v3.1.62, Fixed: v3.1.63

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.