Adobe Experience Manager DOM-Based Cross-Site Scripting Vulnerability

A DOM-based Cross-Site Scripting (XSS) vulnerability has been identified in Adobe Experience Manager versions 6.5.21 and earlier. This vulnerability allows low-privileged attackers to execute arbitrary code in the context of the victim's browser session. Exploitation involves manipulating the DOM environment to inject malicious scripts that are executed by the victim's browser. This issue requires user interaction, such as following a malicious link.

Impact

Exploitation of this vulnerability could lead to Cross-Site Scripting, allowing for the execution of malicious scripts in the context of the user's browser session.