CVE-2024-26066: 
Adobe Experience Manager vulnerability analysis and mitigation

CVE-2024-26066 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.20 and earlier. The vulnerability was disclosed on June 13, 2024, and was discovered by Adobe Systems Incorporated (NVD).

The vulnerability is classified as a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by injecting malicious scripts into vulnerable form fields. When a victim browses to the page containing the vulnerable field, the malicious JavaScript may be executed in their browser. The vulnerability has been assigned a CVSS v3.1 base score of 5.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (NVD).

The vulnerability allows attackers to inject and execute malicious JavaScript code in victims' browsers when they visit affected pages. This could potentially lead to unauthorized data access and manipulation of web content within the context of the affected Adobe Experience Manager installation (NVD).

The vulnerability requires an attacker to have low privileged access and user interaction for successful exploitation. The attack can be launched remotely through network access (NVD).

Adobe has addressed this vulnerability in versions after 6.5.20. Users are advised to update their Adobe Experience Manager installations to the latest version to mitigate this security risk (NVD).