Adobe Experience Manager XSS

Adobe Experience Manager is a web content management system used by organizations to manage and publish their websites. This vulnerability allows attackers to inject malicious scripts into vulnerable form fields, which can be executed in a victim's browser when they browse to the page containing the field.

Affected versions: 6.5.23

1. Upgrade to Adobe Experience Manager 6.5.24 or later from the official Adobe website: https://www.adobe.com/go/sem
2. Immediate mitigations:
3. Restrict network access to your AEM instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• Vendor Advisory