MEDIUM 5.4 NVD

CVE-2025-64854

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious

Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

Affected Products

adobe/experience_manager

References

https://helpx.adobe.com/security/products/experience-manager/apsb26-98.html

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-09-08 via NVD. Affected: adobe/experience_manager.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.