CVE-2024-36183

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier

Description: The issue is related to a lack of protection of the web page structure in Adobe Experience Manager, which could allow a remote attacker to conduct a cross-site scripting attack. This vulnerability could enable an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a malicious form.

Recommendations: For Adobe Experience Manager versions 6.5.20 and earlier, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting user interaction with potentially malicious links or forms to minimize the risk of exploitation.