PT-2024-4953
CVE-2024-36164
·
تاريخ النشر
2024-06-11
·
تاريخ التحديث
2024-06-17
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Adobe Experience Manager versions 6.5.20 and earlier
Description:
The issue is related to a stored Cross-Site Scripting (XSS) vulnerability. It could be exploited by an attacker to inject malicious scripts into vulnerable form fields. When a victim browses to the page containing the vulnerable field, malicious JavaScript may be executed in their browser.
Recommendations:
For versions 6.5.20 and earlier, update to a version that includes a fix for this issue to prevent exploitation of the stored Cross-Site Scripting vulnerability. As a temporary workaround, consider restricting access to vulnerable form fields until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾