CVE-2024-43743: 
Adobe Experience Manager vulnerability analysis and mitigation

CVE-2024-43743 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and earlier. The vulnerability was disclosed on December 10, 2024, and received a CVSS v3.1 base score of 5.4 (Medium severity) (NVD).

The vulnerability is classified as a stored Cross-Site Scripting (CWE-79) issue that allows attackers to inject malicious scripts into vulnerable form fields. When victims browse to pages containing the compromised fields, malicious JavaScript may be executed within the context of their browsers. The vulnerability requires low privileges and user interaction for successful exploitation, with a CVSS v3.1 vector string of CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (NVD).

The successful exploitation of this vulnerability could allow attackers to execute arbitrary JavaScript code in victims' browsers when they visit affected pages. This could potentially lead to theft of sensitive information, session hijacking, or other client-side attacks within the context of the affected Adobe Experience Manager installation (CIS Advisory).

Users should upgrade to the latest version of Adobe Experience Manager to address this vulnerability. The issue affects versions 6.5.21 and earlier, suggesting that versions after 6.5.21 contain the necessary security fixes (NVD).