Adobe Experience Manager vulnerable to Cross-Site Scripting (XSS)
CVE-2024-52830

5.4MEDIUM

Key Information:

Vendor

Adobe
Status
Experience Manager
Vendor
CVE Published:
10 December 2024

What is CVE-2024-52830?

Adobe Experience Manager versions 6.5.21 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject malicious JavaScript into susceptible form fields. When users interact with these compromised fields, the malicious scripts can run in their browsers, potentially leading to data theft or unauthorized actions within the application. It is crucial for organizations using affected versions to implement security measures to mitigate the risk associated with this vulnerability.

References

https://helpx.adobe.com/security/products/experience-mana...

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.