CVE-2023-48587 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48563

CVE-2023-48563 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier. The root cause is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, which could be abused by a low-privileged attacker, with user interaction, to inject malicious scripts that run in a vi...

CVE-2023-48563 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48515

Adobe Experience Manager 6.5.18 and earlier are affected by a stored XSS vulnerability (CVE-2023-48515) in vulnerable form fields. A low-privilege attacker could inject malicious scripts, which execute in the victim’s browser when visiting the affected page. The issue is discussed in Adobe’s APSB...

CVE-2023-48515 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48443

Adobe Experience Manager (AEM) versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker can lure a user to visit a crafted URL referencing a vulnerable page, malicious JavaScript could execute in the victim’s browser. The CVSSv...

CVE-2023-48443 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48490

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a DOM-based cross-site scripting (XSS) vulnerability. The issue allows a low-privileged attacker to lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to execute in the victim’s browser. Affected comp...

CVE-2023-48517 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48517 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48595

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privilege attacker can inject malicious scripts, which execute in a victim’s browser when visiting the page containing the vulnerable field. Root...

CVE-2023-48595 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48517

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when they load the affected page. The CVSS 3.1 metrics in...

CVE-2023-48586 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48586

Adobe Experience Manager 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts executed in a victim’s browser upon visiting the page containing the vulnerable field. Root cause relat...

CVE-2023-48551

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2023-48551). A low-privileged attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the vulnerable field. The issue i...

CVE-2023-48551 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48559 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48559 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48559

CVE-2023-48559 affects Adobe Experience Manager (AEM) 6.5.18 and earlier. The issue is a stored XSS in vulnerable form fields, enabling a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the affected field. Public sources in th...