Stored Cross-Site Scripting Vulnerability in Adobe Experience Manager

CVE-2025-64817

What is CVE-2025-64817?

Adobe Experience Manager versions 6.5.23 and earlier are susceptible to a stored Cross-Site Scripting (XSS) vulnerability, enabling low privileged attackers to inject harmful scripts into vulnerable form fields. When users interact with these compromised fields, malicious JavaScript can execute within their browsers, potentially leading to data theft or other malicious activities. It is crucial for organizations using affected versions to implement security measures to mitigate the risks associated with this vulnerability.

References