CyberRota Analysis
AI-GeneratedAdobe Experience Manager is vulnerable to a DOM-based Cross-Site Scripting (XSS) flaw that allows attackers to execute malicious JavaScript in the victim's browser, contingent upon user interaction with a specially crafted webpage. The medium severity of this vulnerability (CVSS 5.4) necessitates prioritization by organizations using Adobe Experience Manager, particularly those handling sensitive user data or operating in environments where user trust is critical. Immediate action should be taken to mitigate the risk of exploitation and protect end-users.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)