CVE-2023-48620: 
Adobe Experience Manager vulnerability analysis and mitigation

CVE-2023-48620 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.18 and earlier. The vulnerability was disclosed on December 15, 2023, and received a CVSS v3.1 base score of 5.4 (Medium) (NVD).

The vulnerability is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). It allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. The vulnerability has been assigned a CVSS v3.1 vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, indicating network accessibility, low attack complexity, low privileges required, user interaction required, and potential for confidentiality and integrity impacts (NVD).

When exploited, the vulnerability allows malicious JavaScript to be executed in a victim's browser when they browse to the page containing the vulnerable field. This can lead to unauthorized access to user data and potential manipulation of browser content within the context of the affected application (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Experience Manager (Adobe Advisory).