Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64572

What is CVE-2025-64572?

Adobe Experience Manager versions up to 6.5.23 are vulnerable to a stored Cross-Site Scripting (XSS) issue. This flaw could allow a low privileged attacker to inject malicious scripts into form fields, which may be executed in the context of a victim user’s browser. When users interact with the affected forms, their browsers could inadvertently run the attacker's scripts, leading to potential data theft or exposure of sensitive information.

References