CVE-2023-48549

Summary

CVE-2023-48549 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and earlier. This issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. The malicious JavaScript code can be executed in a victim's browser when they visit the webpage containing the affected form, potentially leading to data theft or unauthorized account access. This vulnerability poses a significant security risk and requires immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.