DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2024-53965

Summary

Adobe Experience Manager versions 6.5.21 and earlier are vulnerable to a DOM-based Cross-Site Scripting (XSS) flaw. This issue arises when an attacker with low privileges crafts malicious URLs or inputs that alter DOM elements. Upon user interaction with these manipulated links or inputs, arbitrary scripts can be injected and executed within the victim's browser session. This attack mechanism primarily relies on user actions, highlighting the importance of awareness and caution when dealing with untrusted sources.

References