CVE-2019-8228: XSS
Withdrawn Advisory
This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references.
Original Description
In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code into transactional email page when creating a new email template or editing existing email template.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8228?
CVE-2019-8228 has been withdrawn and does not indicate any severity as it was determined not to affect supported ecosystems.
How do I fix CVE-2019-8228?
Since CVE-2019-8228 has been withdrawn, no specific fix is required.
What versions of Magento are affected by CVE-2019-8228?
CVE-2019-8228 was related to Magento versions below 1.9.4.3 and 1.14.4.3.
Is CVE-2019-8228 relevant to my Magento installation?
CVE-2019-8228 is not relevant as it has been withdrawn and does not affect packages in supported ecosystems.
Why was CVE-2019-8228 withdrawn?
CVE-2019-8228 was withdrawn because the vulnerability was found not to affect any supported packages.