CVE-2023-48539

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier

Description The issue is related to a lack of protection for the web page structure in Adobe Experience Manager, which can be exploited by a remote attacker to conduct a cross-site scripting (XSS) attack. This could allow malicious JavaScript content to be executed within the context of the victim's browser if a low-privileged attacker convinces the victim to visit a URL referencing a vulnerable page.

Recommendations For Adobe Experience Manager versions 6.5.18 and earlier, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to vulnerable pages until a patch is available.