DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2024-53968

Summary

Adobe Experience Manager versions 6.5.21 and earlier are susceptible to a DOM-based Cross-Site Scripting (XSS) vulnerability. This issue allows low privileged attackers to manipulate the Document Object Model (DOM) in a victim's browser session. By injecting malicious scripts through user interaction—typically via a malicious link—attackers can execute arbitrary code within the context of the victim's session. Addressing this vulnerability is crucial to preventing potential exploitation and safeguarding user information.

References