Reflected Cross-Site Scripting Vulnerability in Adobe Experience Manager Forms

CVE-2026-34693

What is CVE-2026-34693?

Adobe Experience Manager Forms JEE LTS SP1 and version 6.5.24.0, as well as earlier versions, contain a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this flaw by injecting malicious scripts into web pages, which may enable them to gain elevated access or control over a victim's account or active session. Successful exploitation depends on specific conditions and necessitates user interaction, requiring the victim to visit a malicious URL or engage with a compromised webpage.

References