Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64546

What is CVE-2025-64546?

Adobe Experience Manager versions 6.5.23 and earlier are vulnerable to a stored Cross-Site Scripting (XSS) issue that can be exploited by low-privileged attackers. This vulnerability allows malicious scripts to be injected via form fields, which may subsequently execute in the browsers of users who access the affected pages. Such attacks could lead to unauthorized data access, user session hijacking, and other security risks, highlighting the importance of immediate action to mitigate exposure.

References