Adobe Acs Aem Commons vulnerabilities

1 known vulnerability affecting adobe/acs_aem_commons.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-28820MEDIUMCVSS 6.1fixed in 5.2.02022-04-21

CVE-2022-28820 [MEDIUM] CWE-79 CVE-2022-28820: ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerab ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User input submitted via these parameters is not validated or sanitised. An attacker must provide a link to someone with access to AEM Author, and could poten