← CVE Intelligence

CVE-2021-40711

Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution PUBLISHED

Description (CNA)

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Affected (CNA)

Vendor / productVersions
Adobe / Experience Manageraffected unspecified through 6.5.9.0; affected unspecified through None

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.