CVE-2023-48526

Summary

CVE-2023-48524 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the affected page, the malicious JavaScript code is executed in their browser, potentially leading to data theft, unauthorized access, or other malicious activities. This vulnerability poses a significant risk to organizations using the affected Adobe Experience Manager versions and highlights the importance of timely software updates to maintain a secure digital environment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.