CVE-2019-8091 (HIGH) CVSS 7.2
🟠 Severity: HIGH (CVSS 7.2)
A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigger remote code execution.
Published: 2019-11-05
Last Modified: 2026-06-17 ⚠️
References: