GHSA-x9fr-f6q7-qvr7
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigger remote code execution.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 2, 2025 6:26 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.