A new critical vulnerability in Adobe Experience Manager allows arbitrary code execution without user interaction, affecting multiple versions of the platform.
The National Vulnerability Database lists a CVSS 9.8 critical object injection vulnerability in ThemeREX Group Travesia, affecting versions up to 1.1.16.