CVE-2024-26057

Description

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically requires user interaction, such as convincing a user to click on a specially crafted link or to submit a form that triggers the malicious script.

Reserved 2024-02-14 | Published 2024-06-13 | Updated 2024-10-07 | Assigner adobe

Problem types

Cross-site Scripting (DOM-based XSS) (CWE-79)

Product status

Default status
affected

Any version
affected

References

helpx.adobe.com/...roducts/experience-manager/apsb24-28.html vendor-advisory

cve.org (CVE-2024-26057)

nvd.nist.gov (CVE-2024-26057)

Download JSON