Unscored CVE-2018-4876 EUVD-2018-16661GHSA-c3mv-qqg8-gjxx

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref fu…

Published Feb 27, 2018 · Updated Aug 5, 2024 · Assigned by adobe

Description

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPI#getValidHref function.

Vendor	Product	Affected	Fixed
—	Adobe Experience Manager 6.3, 6.2, 6.1	Adobe Experience Manager 6.3, 6.2, 6.1	—