CVE-2023-48551
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-48551 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. By exploiting this flaw, an adversary can execute harmful JavaScript code in a victim's browser when they visit the affected page. This vulnerability poses a significant risk to users, as it enables attackers to steal sensitive information or launch further attacks. It is essential for organizations using the affected Adobe Experience Manager versions to apply the available patches promptly to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Experience Manager
- Adobe Experience Manager AEM Cloud Service
Affected Vendors
- Adobe