Stored XSS Vulnerability in Adobe Experience Manager

CVE-2025-46878

What is CVE-2025-46878?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This security weakness can be exploited by an attacker with low privileges to inject malicious JavaScript code into vulnerable form fields. When users access a page containing these compromised fields, the injected scripts may execute in their browsers, potentially leading to unauthorized actions and data theft. It is crucial for users and administrators to apply the latest security patches to mitigate the risks associated with this vulnerability.

References