Stored XSS Vulnerability in Adobe Experience Manager

CVE-2025-64558

What is CVE-2025-64558?

Adobe Experience Manager versions 6.5.23 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw can be exploited by attackers with low privileges to inject malicious JavaScript code into vulnerable form fields. When users interact with these fields, the injected scripts may execute in their browsers, potentially leading to unauthorized data access or manipulation. Organizations using affected versions are urged to apply the necessary patches and implement security measures to safeguard their applications.

References