Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-46932

What is CVE-2025-46932?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting vulnerability. This flaw allows low privileged attackers to inject malicious scripts into vulnerable form fields. When a targeted user visits a page containing the compromised field, the injected JavaScript may execute in their browser, potentially leading to session hijacking, data theft, or other malicious activities. It is essential for organizations using these versions to implement security measures and apply updates to mitigate the risk of exploitation.

References