Executive Summary

This vulnerability affects Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier. It is a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious scripts into vulnerable form fields.

When a victim browses to a page containing the vulnerable field, the malicious JavaScript injected by the attacker may be executed in the victim's browser.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to the execution of malicious scripts in the browsers of users who visit affected pages. This can result in unauthorized actions performed on behalf of the user, theft of sensitive information such as cookies or session tokens, and potential compromise of user accounts.

Since the attacker requires only low privileges to inject the malicious scripts, the risk of exploitation is significant.

Useful 0 Not Useful 0