NetSight
IP …
medium6.1

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

Impact

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

Affected products

VendorProductAffected versions
AdobeExperience Manager
Versions 6.1.0, 6.2.0, 6.3.0

Weakness classification

CWE-79

References