CVE-2024-52830

Summary

CVE-2024-52830 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and prior. This issue allows malicious actors to inject harmful scripts into specific form fields. An attacker could exploit this flaw by crafting a malicious input that, once stored, is later executed in a victim's browser when they access the affected page. The potential consequences include unauthorized access to sensitive data, session hijacking, and other forms of cyberattacks. Organizations using the affected versions are advised to apply the necessary patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.