Adobe Experience Manager versions 6.5.21 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
2024-12-10T22:15:11.110
2024-12-17T16:16:42.720
Analyzed
CVSSv3.1: 5.4 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | adobe | experience_manager | < 6.5.22.0 | Yes |
Application | adobe | experience_manager | < 2024.11.0 | Yes |