Cross-site Scripting (XSS) - Reflected (CWE-79)CVSS 4.2€1,504
Reflected XSS in AI Chat Bot Greetings at help.shopify.com via Markdown Image Rendering
saltymermaid
Disclosed on HackerOne · June 18, 2026
Publicly disclosed report · by saltymermaid
View original on HackerOneSummary
I was able to leverage a potential CSRF at help.shopify.com which can lead to RXSS via the AI assistant chat greetings by abusing the way markdown images are rendered in the chat.
The AI bot at help.shopify.com has the ability to use markdown to improves conversation experience, while we customer, can't really use it. In the greetings process, I noticed that the URL was being reflected which lead me to investigate and see if it could be abused in some ways.
Description
The issue starts with the following CSRF where a POST request is made to https://help.shopify.com/en/search to set the AI greetings in the victim's session.