Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64556

What is CVE-2025-64556?

Adobe Experience Manager versions up to 6.5.23 are susceptible to a stored Cross-Site Scripting vulnerability. This flaw can be exploited by low-privileged attackers to inject harmful scripts into form fields. When a user interacts with the infected field, the malicious JavaScript may execute within their browser, potentially exposing sensitive information or performing harmful actions. It is crucial for users of affected versions to apply necessary patches to mitigate this risk.

References