Medium 5.4

Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)

CVE-2026-123341 First seen on SecPulse 06:55

Summary

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is chan...

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Adobe	AdobeAdobe Experience Manager as a Cloud Service	< 2026.10.28871→ 2026.10.28871	2026.10.28871

Original description The description as published by the source.

Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.

Source: CVE.org (CVE Program・cvelistV5) NVD

References

• web psirt@adobe.com