Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-47040

What is CVE-2025-47040?

The vulnerability involves a stored Cross-Site Scripting (XSS) flaw in Adobe Experience Manager, allowing low privilege attackers to inject harmful scripts into form fields. When a user interacts with a compromised form, the injected malicious JavaScript may execute in the user's browser, potentially leading to unauthorized actions or data exposure. This highlights the importance of patching and maintaining web applications against emerging threats.

References