Adobe Experience Manager vulnerable to Cross-Site Scripting (XSS) attack

CVE-2024-41844

What is CVE-2024-41844?

Adobe Experience Manager versions prior to 6.5.21 are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This security flaw allows attackers to inject malicious JavaScript into form fields, which can subsequently be exploited to execute harmful scripts in the context of a user's browser session. The implication of this vulnerability highlights the necessity for robust web application security measures to mitigate potential risks associated with script injection attacks. Regular updates and security patches are essential to shield systems from exploitation.

References