Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64574

What is CVE-2025-64574?

Adobe Experience Manager versions 6.5.23 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This security flaw can be exploited by an attacker with low privileges, allowing them to inject harmful scripts into specific vulnerable form fields. If a user interacts with a page containing the compromised field, malicious JavaScript could be executed within their browser session, potentially leading to unauthorized actions or exposure of sensitive information.

References