Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64616

What is CVE-2025-64616?

A stored Cross-Site Scripting (XSS) vulnerability exists in Adobe Experience Manager versions 6.5.23 and earlier, allowing low privileged attackers to inject malicious scripts into form fields. When a user interacts with these infected fields, malicious JavaScript may execute in their browser, potentially leading to unauthorized actions or data exposure. It’s crucial for organizations using affected versions to implement security measures to mitigate this vulnerability and safeguard user data.

References