Skip to content
OpenAdvisories
Medium · 6.3 CVE-2021-28628 EUVD-2021-15297GHSA-4483-j8pv-wv4j

Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp

Published Aug 24, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Affected products

VendorProductAffectedFixed
Adobe Experience Manager unspecified – ≤ 6.5.8.0, unspecified – ≤ None —

References