CVE-2024-36234

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.20 and earlier

Description The issue is a DOM-based Cross-Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that triggers the vulnerability. The vulnerability exists due to inadequate protection of the web page structure.

Recommendations For Adobe Experience Manager versions 6.5.20 and earlier, update to a version later than 6.5.20 to resolve the issue. As a temporary workaround, consider restricting user interaction with potentially malicious links or forms to minimize the risk of exploitation.