CVE-2019-8228
—CVSS 3.1
4.8 medium
EPSS
<1%p42
Published
()
Modified
Description
in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template.
- Vendors
- magento
- Products
- magento
- Ecosystems
- E-commerce
- Weakness
- CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.