Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64789

What is CVE-2025-64789?

Adobe Experience Manager versions 6.5.23 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability. This issue allows a low privileged attacker to inject malicious scripts into form fields. When other users visit a page containing these fields, the injected malicious JavaScript may execute in their browsers, potentially compromising their data and security. It’s crucial for administrators to promptly apply security updates to protect against such attacks.

References