CVE-2023-48493: 
Adobe Experience Manager vulnerability analysis and mitigation

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerability that was disclosed on December 15, 2023. The vulnerability affects Adobe Experience Manager software and has been assigned CVE-2023-48493 (NVD).

This is a DOM-based Cross-site Scripting (XSS) vulnerability, categorized under CWE-79 (Improper Neutralization of Input During Web Page Generation). The vulnerability has been assigned a CVSS v3.1 Base Score of 5.4 (Medium) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (Adobe Security).

If successfully exploited, this vulnerability allows a low-privileged attacker to execute malicious JavaScript content within the context of the victim's browser when the victim visits a URL referencing a vulnerable page (NVD).

The vulnerability requires a low-privileged attacker to convince a victim to visit a specifically crafted URL that references a vulnerable page. The attack complexity is considered low, but user interaction is required for successful exploitation (Adobe Security).

Adobe has addressed this vulnerability in versions after 6.5.18 of Adobe Experience Manager. Users are advised to update to the latest version to mitigate this security issue (Adobe Security).