CVE-2023-48490

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier

Description The issue is related to a Cross-site Scripting (DOM-based XSS) vulnerability. It may allow a low-privileged attacker to execute malicious JavaScript content within the context of a victim's browser if the victim visits a URL referencing a vulnerable page. The vulnerability is also described as related to the lack of protection of the web page structure, which could allow a remote attacker to execute arbitrary code.

Recommendations For Adobe Experience Manager versions 6.5.18 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.