Tag: Clickjacking

HTML Injection, Cross-Frame Scripting & Reflected XSS in Magento Marketplace

// TL;DR I found three related client-side issues on Magento’s Marketplace, all stemming from the same unsanitised search parameter: HTML injection, cross-frame scripting (a clickjacking/UI-redressing class…