Name of the Vulnerable Software and Affected Versions:

Adobe Experience Manager versions 6.5.22 and earlier

Description:

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting (XSS) issue. A low privileged attacker can exploit this to inject malicious scripts into vulnerable form fields. Execution of malicious JavaScript may occur in a victim’s browser when accessing the page containing the vulnerable field.

Recommendations:

Update Adobe Experience Manager to a version later than 6.5.22.