PT-2018-16585

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 through 6.3 Description The issue allows for cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function. Recommendations For Adobe Experience Manager versions 6.1 through 6.3, update to a...

CVE-2018-4876: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...