CVE-2016-0955

Publication date

2016-02-10 20:00:00

Family

adobe

State

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog.