DOM-based Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64545

What is CVE-2025-64545?

Adobe Experience Manager versions 6.5.23 and earlier are susceptible to a DOM-based Cross-Site Scripting vulnerability. This issue allows a low privileged attacker to execute malicious scripts within the context of a victim's browser. Exploitation requires user interaction, such as clicking on a specially crafted URL or engaging with a compromised web page, potentially leading to unauthorized actions or data theft.

References