Cross site scripting

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48522 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48522 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48522

CVE-2023-48522 (Adobe Experience Manager) : A stored Cross-Site Scripting (XSS) vulnerability affects AEM versions 6.5.18 and earlier. An attacker with low privileges can inject JavaScript into vulnerable form fields, which would execute in a victim’s browser when visiting the affected page. Root...

CVE-2023-48512

Adobe Experience Manager (AEM) up to version 6.5.18 is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields (CVE-2023-48512). The issue enables a low-privileged attacker to inject malicious scripts, which could execute in a victim’s browser when visiting the aff...

CVE-2023-48512 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48512 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48604

Adobe Experience Manager (AEM) 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious scripts that execute in a victim’s browser when visiting a page containing the vulnerable field. The issue i...

CVE-2023-48468

CVE-2023-48468 affects Adobe Experience Manager 6.5.18 and earlier with a DOM-based XSS vulnerability. A low-privilege attacker can lure a user to a vulnerable page URL, allowing malicious JavaScript to execute in the victim’s browser. CVSSv3.1 base score 5.4 (MEDIUM); attack vector NETWORK, priv...

CVE-2023-48468 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48501 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48501

CVE-2023-48501 affects Adobe Experience Manager (AEM) versions 6.5.18 and earlier, with a stored XSS vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker, with user interaction, to inject malicious scripts that execute in a victim’s browser when visiting ...

CVE-2023-48607 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48564

Adobe Experience Manager 6.5.18 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing low-privilege attackers to inject JavaScript executed in victims’ browsers. The issue, CVE-2023-48564, is documented with a low-privilege (PR:L), low im...

CVE-2023-48564 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

CVE-2023-48607

CVE-2023-48607 is an Adobe Experience Manager (AEM) reflected XSS affecting 6.5.18 and earlier, allowing a low-privileged attacker to lure a victim to a crafted URL and execute JavaScript in the browser. Affected component is the AEM web UI/page rendering logic referenced by the CVE entry; root c...

CVE-2023-48454 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting DOM-based XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

CVE-2023-48454

Adobe Experience Manager (AEM) version 6.5.18 and earlier is affected by a DOM‑based Cross‑Site Scripting (XSS) vulnerability. The issue can be triggered when a low‑privileged attacker persuades a victim to visit a URL referencing a vulnerable page, allowing malicious JavaScript to execute in the...

CVE-2023-48503

CVE-2023-48503 affects Adobe Experience Manager 6.5.18 and earlier with a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when they visit the page containing the field. CVSS v3.1 base score 5.4 (Medi...

CVE-2023-48503 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...