Description

There is a lack of input length validation in phone number field at the checkout product where any user may able to add more than 5000+ character which shouldn't be allowed . Our expected result should be only 255 character should be allowed

Steps to Reproduce

• In the Shop , checkout anyone product
• Now , In the checkout page we have to enter some details like name , mail id and phone number
• In the Input field namely First name and phone number were vulnerable to this
• We can add more than 5000+ character on these field without any length validation

Impact

An attacker would make use of this vulnerability and this leads to

• Memory corruption
• Denial of Service