Subscribe
HIGH

CVE-2019-8091

CVSS 7.2 Disclosed
View full record on NIST NVD → CVE Response Runbook

Severity: HIGH (CVSS 7.2)

A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigger remote code execution.

Published: 2019-11-05
Last Modified: 2026-06-17

References:

View Full CVE Details on NIST NVD →