CVE-2024-26111

CVE-2024-26111 affects Adobe Experience Manager 6.5.20 and earlier and is a reflected XSS flaw. An attacker must lure a user to a vulnerable URL, resulting in malicious JavaScript executing in the victim’s browser (impact: local in-browser data/behavior). The CVSSv3.1 base score is 5.4 (Medium). ...

CVE-2024-26111 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browse...