CWE-79: Cross-site Scripting vulnerabilities

The Booking Package WordPress plugin up to version 1.7.29 is affected by a stored cross-site scripting (XSS) vulnerability via the 'id' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping.

A Cross-Site Scripting (XSS) vulnerability exists in Broadcom Symantec Endpoint Detection and Response (SEDR) Console versions 4.12 and prior to 4.13. This vulnerability allows an attacker to inject malicious scripts that execute in the context of another user's session, potentially leading to unauthorized access to restricted functionality or information.

Adobe Dimension contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw allows a local attacker with user permissions to execute arbitrary code in the context of the current user. Exploitation requires user interaction, specifically that the victim runs the application. The vulnerability affects Adobe Dimension versions from 0 up to and including 4.1.8. The vulnerability has a high severity rating with a CVSS score of 8.6.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity but not availability. The CVSS score is 5.4, indicating a medium severity level.

Adobe Experience Manager as a Cloud Service is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the victim's browser context. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity with no impact on availability. The severity is rated medium with a CVSS score of 5.4.

Adobe Experience Manager as a Cloud Service is affected by a critical reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-83662). This vulnerability allows an attacker to inject malicious scripts via crafted URLs or compromised web pages, potentially leading to elevated access or control over a victim's account or session. Exploitation requires user interaction. The vulnerability impacts confidentiality and integrity but not availability. No explicit patch or remediation details are provided. The affected versions include 0 through 6.5.25 and up to 2026.9.28187.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in a victim's browser by manipulating the DOM environment. Exploitation requires the victim to visit a crafted webpage, and the vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity with a CVSS score of 5.4. No patch or official remediation information is provided in the available data.

Adobe Experience Manager 6.5 LTS is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can exploit this by convincing a victim to visit a crafted URL, causing malicious JavaScript to execute in the victim's browser context. The vulnerability affects versions up to and including 6.5.25. The CVSS score is 5.4, indicating a medium severity issue.

Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into form fields. When a victim views the affected page, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in a victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity with a CVSS score of 5.4.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CVE-2026-110079) that allows an attacker to execute malicious JavaScript in a victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The scope of the vulnerability is changed, indicating that the impact extends beyond the vulnerable component. The CVSS score is 5.4 (medium severity).

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The CVSS score is 5.4, indicating a medium severity issue.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in a victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The CVSS 3.1 base score is 5.4, indicating medium severity.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions from 0 up to and including 6.5.25. The vulnerability has a medium severity with a CVSS score of 5.4.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The CVSS 3.1 base score is 5.4, indicating medium severity.

Adobe Experience Manager 6.5 LTS is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79). This vulnerability allows an attacker to manipulate the DOM environment to execute malicious JavaScript in the context of a victim's browser. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability impacts confidentiality and integrity with a medium severity rating.

Adobe Experience Manager 6.5 contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim visits a page with the injected content, the malicious JavaScript executes in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.

Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows low-privileged attackers to inject malicious scripts into vulnerable form fields. When a victim visits a page containing the injected script, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.

Adobe Experience Manager 6.5 LTS contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into form fields. When a victim visits a page with the vulnerable field, the malicious JavaScript may execute in their browser. This vulnerability affects versions up to and including 6.5.25. The vulnerability has a medium severity rating with a CVSS score of 5.4.

Adobe Experience Manager 6.5 contains a DOM-based Cross-Site Scripting (XSS) vulnerability (CWE-79) that allows an attacker to execute malicious JavaScript in the victim's browser by manipulating the DOM environment. Exploitation requires user interaction, specifically the victim visiting a crafted webpage. The vulnerability affects versions up to and including 6.5.25. The issue changes the security scope and has a medium severity rating with a CVSS score of 5.4.