CVE-2025-54252 – Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

CVE ID : CVE-2025-54252

Published : Sept. 9, 2025, 4:36 p.m. | 19 minutes ago

Description : Adobe Experience Manager versions 6.5.23.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. This could result in bypassing security features within the application. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field.

Severity: 5.4 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…