CVE-2024-53969

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Mar 19, 2025
CWE ID 79

Summary

CVE-2024-53969 is a DOM-based Cross-Site Scripting (XSS) vulnerability that impacts Adobe Experience Manager versions 6.5.21 and prior. This issue allows attackers to inject malicious scripts into a victim's browser session by manipulating the DOM environment. To exploit this vulnerability, users must interact with a malicious link, potentially leading to the execution of arbitrary code in their browser. This weakness could result in information disclosure, session hijacking, or other forms of unauthorized access. Adobe has released patches to mitigate this issue, and users are strongly encouraged to apply them promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share