CVE-2020-9741: Stored XSS in AEM Forms Components
The AEM forms add-on for versions 6.5.5.0 (and below) and 6.4.8.2 (and below) is affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this AEM forms add-on vulnerability?
The vulnerability ID for this AEM forms add-on vulnerability is CVE-2020-9741.
What is the severity of CVE-2020-9741?
The severity of CVE-2020-9741 is critical.
Which versions of Adobe Experience Manager are affected by CVE-2020-9741?
Adobe Experience Manager versions 6.5.5.0 and below, as well as 6.4.8.2 and below, are affected by CVE-2020-9741.
What is the impact of CVE-2020-9741?
CVE-2020-9741 allows users with 'Author' privileges to store malicious scripts in fields associated with the Forms component, which can be executed in a victim's browser.
Is there a fix available for CVE-2020-9741?
Yes, Adobe has released a security update to address the vulnerability. Please refer to the official Adobe Security Bulletin APSB20-56 for more information.