CVE-2022-44510

CVE-2022-44510 describes a reflected XSS in Adobe Experience Manager (AEM) versions 6.5.14 and earlier, where a low-privileged attacker lures a victim to a vulnerable URL to execute malicious JavaScript in the victim’s browser. The issue affects AEM’s web context via a vulnerable page reference; ...

CVE-2022-44510 AEM Reflected XSS Arbitrary code execution

Adobe Experience Manager version 6.5.14 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...