CVE-2025-64557

CVE-2025-64557 is a stored XSS in Adobe Experience Manager (AEM) versions 6.5.23 and earlier. A low-privileged attacker can inject malicious scripts into vulnerable form fields, and the payload may be executed in a victim’s browser when visiting the page containing the vulnerable field. The findi...