CVE-2019-8227

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code…

published November 6, 2019

CVSS
—
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Published
2019-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code…
    cvelistv5