CVE-2026-110078
MEDIUMCVSS 5.4Description
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
Timeline
Published:October 13th, 2026 8:17 PM
Last modified:October 29th, 2026 6:54 PM
CVSS Scoring
CVSS v3: 5.4 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Software
From NVD CPE configuration data
Vendors
adobe
Products
experience_manager
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute