Name of the Vulnerable Software and Affected Versions:

Adobe Experience Manager versions 6.5.22 and earlier

Description:

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting (XSS) issue. A low-privileged attacker can exploit this to inject malicious scripts into vulnerable form fields. Execution of malicious JavaScript may occur in a victim’s browser when accessing the page containing the vulnerable field.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.