Adobe Experience Manager Reflected Cross-Site Scripting Vulnerability

A reflected Cross-Site Scripting vulnerability has been identified in Adobe Experience Manager versions 6.5.22 and earlier. This issue allows a low-privileged attacker to execute malicious JavaScript in the context of the victim's browser by convincing them to visit a URL that references a vulnerable page.

Impact

Exploitation of this vulnerability allows for reflected Cross-Site Scripting, where an attacker can execute malicious scripts in the context of the user's browser session.