Adobe Experience Manager Screens DOM-Based Cross-Site Scripting Vulnerability

A DOM-based Cross-Site Scripting vulnerability has been identified in Adobe Experience Manager (AEM) Screens) versions 6.5.24, Feature Pack 11.7 and earlier. This vulnerability allows an attacker to manipulate the DOM environment and execute malicious JavaScript in the context of the victim's browser. Exploitation requires user interaction, as the victim must visit a crafted webpage.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution within the context of the victim's browser.

Remediation

Users are advised to update to Adobe Experience Manager (AEM) Screens Feature Pack 11.8. Release notes for this update are available on the Adobe Experience League website.