CVE 5.4 MEDIUM

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)_CVE-2026-34623

5.4 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a specially crafted web page.

Basic Information

ID CVE-2026-34623
Source adobe
Published Apr 14, 2026 at 18:26
Modified Apr 14, 2026 at 18:59

Affected Product

Vendor Adobe
Product Adobe Experience Manager
Affected Versions Adobe Adobe Experience Manager 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.