Adobe Experience Manager Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Adobe Experience Manager (AEM) Screens) versions through 11.6. This vulnerability allows low-privileged attackers to inject malicious scripts into form fields, which could be executed in the context of the victim's browser when they access the page containing the affected field. Exploitation requires user interaction, as the victim must click on a malicious link.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the victim's browser.

Remediation

Users are advised to update to Adobe Experience Manager 6.5.22 Screens FP11.7. Release notes for this update are available on the Adobe Experience Manager Screens user guide.