writeups.xyz / How we tookover shopify accounts with one single click

Submitter : c2a

Date: 10 July 2017

Bounty : undisclosed

Vulnerabilities :

• Stored XSS

Programs :

• Shopify

Authors :

• WeSecureApp (@Wesecureapp)

Link :
https://wesecureapp.com/blog/how-we-tookover-shopify-accounts-with-one-single-click