CVE-2021-40711

Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

• CWE-79
• CWE-79

• https://helpx.adobe.com/security/products/experience-manager/apsb21-82.htmlPatch, Release Notes, Vendor Advisory
• https://helpx.adobe.com/security/products/experience-manager/apsb21-82.htmlPatch, Release Notes, Vendor Advisory

Published

Sep 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40701Adobe Premiere Elements version 2021.2235820 (and earlier) i…7.8
• CVE-2021-40702Adobe Premiere Elements version 2021.2235820 (and earlier) i…7.8
• CVE-2021-40703Adobe Premiere Elements version 2021.2235820 (and earlier) i…7.8
• CVE-2021-40708Adobe Genuine Service versions 7.3 (and earlier) are affecte…7.3
• CVE-2021-40709Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and…7.8
• CVE-2021-40710Adobe Premiere Pro version 15.4 (and earlier) is affected by…7.8
• CVE-2021-40712Adobe Experience Manager version 6.5.9.0 (and earlier) is af…6.5
• CVE-2021-40713Adobe Experience Manager version 6.5.9.0 (and earlier) is af…5.9
• CVE-2021-40714Adobe Experience Manager version 6.5.9.0 (and earlier) is af…6.1
• CVE-2021-40715Adobe Premiere Pro version 15.4 (and earlier) is affected by…7.8
• CVE-2021-40716XMP Toolkit SDK versions 2021.07 (and earlier) are affected …5.5
• CVE-2021-40719Adobe Connect version 11.2.3 (and earlier) is affected by a …9.8