Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-46971

What is CVE-2025-46971?

Adobe Experience Manager versions up to 6.5.22 have a vulnerability that permits low privileged attackers to inject malicious JavaScript into form fields. When users interact with web pages containing these compromised fields, the JavaScript can execute in their browsers, potentially leading to unauthorized actions or data exposure. This vulnerability underscores the importance of web application security, particularly in managing user inputs and securing form handling.

References