CVE-2023-48525 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48525

CVE-2023-48525 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The issue is a DOM-based XSS vulnerability where a low-privilege attacker may entice a victim to visit a vulnerable page URL, enabling malicious JavaScript to execute in the victim’s browser. Impact is client-side;...