CVE-2024-26093: 
Adobe Experience Manager vulnerability analysis and mitigation

Adobe Experience Manager versions 6.5.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability, identified as CVE-2024-26093. The vulnerability was disclosed on June 13, 2024, and affects Adobe Experience Manager up to version 6.5.20 (NVD, Adobe Advisory).

The vulnerability is classified as a reflected Cross-Site Scripting (XSS) issue (CWE-79). It has been assigned a CVSS v3.1 base score of 5.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N, indicating network accessibility, low attack complexity, required low privileges, and user interaction (NVD).

If successfully exploited, this vulnerability allows malicious JavaScript content to be executed within the context of the victim's browser. This could potentially lead to unauthorized access to user data, session hijacking, or other browser-based attacks (NVD).

The vulnerability requires an attacker to convince a victim to visit a URL referencing a vulnerable page. Successful exploitation depends on user interaction, as the victim needs to access a specially crafted URL (NVD).

Users should upgrade to the latest version of Adobe Experience Manager beyond version 6.5.20 to address this vulnerability (Adobe Advisory).