CVE-2023-48503
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-48503: A stored Cross-Site Scripting (XSS) vulnerability has been identified in Adobe Experience Manager versions 6.5.18 and earlier. This issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. Upon exploitation, the malicious JavaScript code is executed in a victim's browser when they access the affected page. This vulnerability poses a significant risk as it can lead to unauthorized data access or theft, as well as other potential security threats. Adobe strongly recommends that affected organizations upgrade to the latest version of Adobe Experience Manager to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Experience Manager
- Adobe Experience Manager AEM Cloud Service
Affected Vendors
- Adobe