DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2024-53969

Summary

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in Adobe Experience Manager versions 6.5.21 and earlier that could allow a low privileged attacker to execute arbitrary code within the victim's browser session. This exploit leverages the manipulation of the DOM environment, requiring user interaction, such as clicking on a malicious link. Attackers can inject harmful scripts that run in the context of the victim's browser, posing significant security risks to affected users.

References