CVE-2023-48468

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.18 and earlier

Description The issue is related to a lack of protection for the web page structure in Adobe Experience Manager, which can be exploited by a remote attacker to conduct a cross-site scripting (XSS) attack. This could allow malicious JavaScript content to be executed within the context of the victim's browser if a low-privileged attacker convinces the victim to visit a URL referencing a vulnerable page.

Recommendations For Adobe Experience Manager versions 6.5.18 and earlier, update to a version later than 6.5.18 to resolve the issue. As a temporary workaround, consider restricting access to vulnerable pages until a patch is available. Avoid using vulnerable URLs that could lead to the execution of malicious JavaScript content within the victim's browser.