Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-47041

What is CVE-2025-47041?

Adobe Experience Manager, especially versions 6.5.22 and earlier, is vulnerable to a stored Cross-Site Scripting (XSS) flaw. This vulnerability allows an attacker with low privileges to inject harmful scripts into the application’s form fields. When a user interacts with these fields, the malicious JavaScript can be executed in their browser, potentially leading to session hijacking or other malicious exploits. It is crucial for users to assess their instances of Adobe Experience Manager and apply necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References