A Facebook plugin built for a top ecommerce platform is said to be vulnerable in a way that allows threat actors to steal people’s credit card information, and ultimately - money.
Security researchers from Friends-of-Presta have warned of an SQL injection vulnerability in pkfacebook, claiming they observed the flaw being abused in the wild.
