CVE-2024-26102

No fix known EPSS <1%CVSS 5.4

Adobe Experience Manager versions 6.5.19 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Published 2024-03-18 · CVE record · OSV

Products: Adobe Experience Manager, adobe experience_manager, adobe experience_manager_cloud_service