Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-47061

What is CVE-2025-47061?

Adobe Experience Manager versions 6.5.22 and earlier are susceptible to a stored Cross-Site Scripting vulnerability, enabling attackers with low privilege to inject harmful scripts into form fields. Affected users might experience execution of malicious JavaScript within their browsers while interacting with compromised pages, potentially leading to data theft or session hijacking. It is crucial for users of affected versions to apply security updates to mitigate risks associated with this vulnerability.

References