CVE-2019-8227

MEDIUM · CVSS 4.8 EPSS 0.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-8227

Severity

MEDIUM

CVSS

4.8

EPSS

0.52%

Java

Original NVD Description

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.