CVE-2020-26028: 
NixOS vulnerability analysis and mitigation

Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. The vulnerability allows attackers to inject malicious scripts into vulnerable form fields, which can then be executed in a victim's browser when they access the page containing the compromised field (Adobe Experience Manager).

The vulnerability is classified as a stored Cross-Site Scripting (XSS) issue with a CVSS v3.1 score of 5.4 MEDIUM. The vulnerability allows attackers to inject malicious JavaScript code into form fields, which gets stored on the server and is later executed when other users browse to the affected page (Adobe Experience Manager).

When successfully exploited, this vulnerability can result in the execution of arbitrary JavaScript code in the context of the victim's browser. This could potentially lead to theft of sensitive information, session hijacking, or other malicious actions performed in the context of the affected user's session (Adobe Experience Manager).

The vulnerability has been addressed in Adobe Experience Manager version 6.5.20 and later. Users are advised to upgrade to the latest version to mitigate this security risk (Adobe Experience Manager).