Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64593

What is CVE-2025-64593?

Adobe Experience Manager versions 6.5.23 and earlier contain a stored Cross-Site Scripting (XSS) vulnerability that may allow low privileged attackers to inject malicious scripts into unprotected form fields. This flaw can lead to execution of harmful JavaScript in the browser of unsuspecting users when they access the compromised page, potentially compromising user data and session integrity. Organizations utilizing affected versions are strongly encouraged to update their systems to mitigate these risks.

References