Adobe Experience Manager cross-site scripting vulnerability (CNVD-2023-9993953)

Adobe Experience Manager (AEM) is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie (Adobe). The program supports mobile content management, marketing and sales campaign management and multi-site management. A cross-site scripting vulnerability exists in Adobe Experience Manager 6.5.18 and prior versions, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.