CVE-2023-48480

Summary

CVE-2023-48480 is a Cross-site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and prior. This issue is DOM-based, meaning it arises from inadequate input validation within the application. An attacker could exploit this vulnerability by convincing a user to visit a maliciously crafted URL, leading to the execution of malicious JavaScript code within the user's browser, potentially resulting in data theft or unauthorized actions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.