Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-46932

What is CVE-2025-46932?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting vulnerability. This flaw allows low privileged attackers to inject malicious scripts into vulnerable form fields. When a targeted user visits a page containing the compromised field, the injected JavaScript may execute in their browser, potentially leading to session hijacking, data theft, or other malicious activities. It is essential for organizations using these versions to implement security measures and apply updates to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References