Html injection on subscription email
CS Money disclosed a bug submitted by benjamin-mauss: https://hackerone.com/reports/1108504 [Source]
Staff without Manage Themes permissions can update themes
Shopify disclosed a bug submitted by callmed0_4: https://hackerone.com/reports/1550400 [Source]
PII Disclosure At `theperfumeshop.com/register/forOrder`
A.S. Watson Group disclosed a bug submitted by alp: https://hackerone.com/reports/1618100 - Bounty: $5111 [Source]