Unrated severityNVD Advisory· Published Mar 11, 2021· Updated Aug 4, 2024

CVE-2020-14988

Description

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML elements, the translations menu via the foldername parameter, the author page via the link URL, or the upload image functionality via an SVG document containing JavaScript.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bloomreach/Experience Managerdescription
Adobe Marketing Cloud/Experience Managerllm-fuzzy
Range: >=4.1.0, <=14.2.2

Patches

Vulnerability mechanics

References

tvrbk.github.io/cve/2021/03/09/brXM.htmlmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000