Adobe Experience Manager Vulnerable to Cross-Site Scripting Attacks

CVE-2024-41845

What is CVE-2024-41845?

Adobe Experience Manager versions 6.5.20 and earlier are susceptible to a stored Cross-Site Scripting vulnerability. This flaw enables attackers to inject malicious JavaScript into vulnerable form fields, which may be executed in the context of a user's browser when they visit pages containing those fields. Successful exploitation could lead to unauthorized actions or data theft, impacting the security of applications built on this platform.

References