Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64582

What is CVE-2025-64582?

Adobe Experience Manager versions up to 6.5.23 are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This flaw can be exploited by low-privileged attackers who can inject malicious scripts into vulnerable form fields. When users interact with these compromised fields, harmful JavaScript code may execute in their browsers, potentially leading to unauthorized actions or data theft. This vulnerability highlights the importance of securing user inputs to prevent script injection attacks.

References