MEDIUM 5.4 NVD

CVE-2026-84397

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

References

https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-09-16 via NVD.

vulnfeed aggregates 14597 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.