Adobe Experience Manager DOM-Based Cross-Site Scripting Vulnerability

A DOM-based Cross-Site Scripting vulnerability has been identified in Adobe Experience Manager versions 6.5.21 and earlier. This vulnerability allows a low-privileged attacker to execute arbitrary code in the context of the victim's browser session. Exploitation involves manipulating a DOM element through a crafted URL or user input to inject malicious scripts that execute when the page is rendered. The attack requires user interaction, as the victim must access the manipulated link or input data into a vulnerable page.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting, allowing for the execution of malicious scripts in the context of the user's browser session.