CVE-2019-8228

MEDIUM · CVSS 4.8 EPSS 0.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-11-06 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-8228

Severity

MEDIUM

CVSS

4.8

EPSS

0.52%

Java

Original NVD Description

in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template.