Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64800

What is CVE-2025-64800?

A stored Cross-Site Scripting vulnerability exists in Adobe Experience Manager versions 6.5.23 and earlier. This security flaw can be exploited by low-privileged attackers who utilize vulnerable form fields to inject malicious scripts. When users visit a page containing these affected fields, the injected JavaScript may execute within their browsers, potentially leading to unauthorized access and data exposure.

References