Lucene search

K
cvelistAdobeCVELIST:CVE-2023-48613
HistoryDec 15, 2023 - 10:17 a.m.

CVE-2023-48613 Stored XSS in `libs/dam/gui/coral/components/admin/contentrenderer/column/columnpreview/clientlibs/columnpreview/js/columnpreview.js`

2023-12-1510:17:25
CWE-79
adobe
raw.githubusercontent.com
1
adobe experience manager
stored xss
columnpreview.js
6.5.18
cross-site scripting
vulnerability
low-privileged attacker
malicious scripts

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

Related for CVELIST:CVE-2023-48613