PT-2026-24523

CVE-2026-27241

Published

2026-03-10

Updated

2026-03-11

Description by

CVSS 2.0

5.5

Medium

MetricsAV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.23 and earlier

Description The software is susceptible to a stored Cross-Site Scripting (XSS) issue. A low-privileged attacker could leverage this to inject malicious scripts into vulnerable form fields. Execution of malicious JavaScript may occur in a victim’s browser when accessing the page with the vulnerable field.

Recommendations Update Adobe Experience Manager to a version later than 6.5.23.

Exploitability

Fix

Impacts

Researchers

Tavis Ormandy

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2026-27241