Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-46981

What is CVE-2025-46981?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw allows attackers with low privileges to inject malicious scripts into affected form fields. When unsuspecting users access the page containing the manipulated field, the submitted JavaScript executes in their browsers, potentially compromising their session or allowing data theft. It is imperative for users of affected versions to apply the latest security updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References