← CVE Intelligence

CVE-2019-8228

Adobe Systems Incorporated / Magento 1 PUBLISHED

Description (CNA)

in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template.

Affected (CNA)

Vendor / productVersions
Adobe Systems Incorporated / Magento 1affected Magento Open Source prior to 1.9.4.3; affected Magento Commerce prior to 1.14.4.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.