CVE-2023-48488

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a DOM-based XSS (CVE-2023-48488). A low-privilege attacker can entice a victim to visit a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser context. Root cause not explicitl...