Adobe Experience Manager Vulnerable to DOM-Based XSS Attacks

CVE-2024-41878

What is CVE-2024-41878?

A DOM-based Cross-Site Scripting vulnerability exists in Adobe Experience Manager versions 6.5.19 and earlier. This security flaw allows malicious actors to inject and execute arbitrary JavaScript code in the context of a user's browser session. Exploitation requires user interaction, primarily through convincing victims to click on harmful links. The implications of this vulnerability could result in unauthorized access to sensitive user information and manipulation of web applications.

References