Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager Screens

CVE-2025-27205

Summary

Adobe Experience Manager Screens versions FP11.3 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw allows low privileged attackers to inject malicious JavaScript into vulnerable form fields. When users visit affected pages, these scripts may execute in their browsers, potentially leading to unauthorized actions. To exploit this vulnerability, attackers require user interaction, as the victim must click on a malicious link to trigger the attack.

References