CVE-2025-55998 – Shopify Smart Search & Filter XSS

CVE ID : CVE-2025-55998

Published : Sept. 8, 2025, 3:15 p.m. | 1 hour, 38 minutes ago

Description : A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify App 1.0 allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the color filter parameter.

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…