The exploit is just tricking it to checking out your cart when you add something part way through the process. Should be patched in a day or two at most.

And you don’t need Chrome for this buddy. Not one bit.