Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-34624

Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Experience Manager

Default version status: unaffected

  • 0 to ≤ 11.7affected
  • 11.8unaffected

References