CVE-2020-9732: Stored XSS in AEM Sites Components
The AEM Forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Sites component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9732?
CVE-2020-9732 has a CVSS score indicating a high severity due to its potential for stored XSS attacks.
How do I fix CVE-2020-9732?
To fix CVE-2020-9732, upgrade to Adobe Experience Manager versions above 6.5.5.0 or 6.4.8.2.
Who is affected by CVE-2020-9732?
CVE-2020-9732 affects users with 'Author' privileges in Adobe Experience Manager Forms versions 6.5.5.0 and below and 6.4.8.2 and below.
What types of exploits are possible with CVE-2020-9732?
CVE-2020-9732 allows for stored XSS attacks where malicious scripts can be executed in the context of the victim's browser.
What software versions are impacted by CVE-2020-9732?
Adobe Experience Manager versions 6.5.5.0 and below, and 6.4.8.2 and below are impacted by CVE-2020-9732.