CVE-2019-8227
CVE-2019-8227
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Nov 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.
Affected products
Adobe Systems Incorporated · Magento 1Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →