CVE-2024-43749

CVE-2024-43749 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The vulnerability is a stored cross-site scripting (XSS) flaw in vulnerable form fields, allowing an attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting the affected page. P...

CVE-2024-43750

CVE-2024-43750 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields, enabling attacker-injected JavaScript to run in a victim’s browser. Affected products and details: AEM 6.5.x (6.5.21 and earlier) with stored XSS in form fields. Root caus...

CVE-2024-52826

CVE-2024-52826: A stored XSS in Adobe Experience Manager (AEM) affects versions up to 6.5.21 and earlier. The vulnerability arises from insecure handling of form field input, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vulnerab...

CVE-2024-52841

CVE-2024-52841 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that allows attacker-supplied JavaScript to execute in a victim’s browser when visiting the affected page. The root cause is improper ...

CVE-2024-53974

CVE-2024-53974 affects Adobe Experience Manager (AEM) 6.5.21 and earlier, with a stored XSS vulnerability in vulnerable form fields that could be exploited by a low-privileged attacker (requires user interaction) to inject malicious scripts executed in a victim’s browser. Connected sources confir...

CVE-2025-46841

CVE-2025-46841 concerns Adobe Experience Manager (AEM) 6.5.22 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing w...

CVE-2025-46878

CVE-2025-46878 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that executes in a victim’s browser when they load the affected page. Exploitation requires user interaction (v...

CVE-2025-46915

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker, with user interaction, to inject malicious JavaScript that executes in a victim’s browser whe...

CVE-2025-46944

CVE-2025-46944 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. A stored Cross-Site Scripting (XSS) vulnerability allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, which may be executed in a victim’s browser when visiting the affected page. The CV...

CVE-2025-46945

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46945). The issue arises in vulnerable form fields where a low-privilege attacker can inject malicious JavaScript, which may execute in a victim’s browser when they load a ...

CVE-2025-46946

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the field. Remediation per APSB25-48 is to apply Adobe’...

CVE-2025-46953

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-46953). Low-privilege attackers could inject malicious scripts into vulnerable form fields, leading to JavaScript execution in victims’ browsers when visiting the affected...

CVE-2025-47074

Context: CVE-2025-47074 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. Details from connected sources confirm a stored Cross-Site Scripting (XSS) vulnerability that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, leading to execut...

CVE-2025-47078

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting pages containing t...

CVE-2023-51461

Adobe Experience Manager (AEM) 6.5.18 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious scripts that execute in a victim’s browser when loading pages with the affected fields. AEM versions prior to 6.5....

CVE-2024-20784

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can cause malicious JavaScript to run in a victim’s browser when visiting pages containing those fields. The CVE-2024-20784 entry is supporte...

CVE-2024-43736

CVE-2024-43736 is a stored XSS flaw affecting Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability allows injected JavaScript in vulnerable form fields, executing in a victim’s browser when the page is loaded. The connected advisory APSB24-69 confirms AEM updates are available to ...

CVE-2024-43739

CVE-2024-43739 affects Adobe Experience Manager up to version 6.5.21. It is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling attacker-controlled JavaScript to run in a victim’s browser when visiting a page containing the affected field. Connected sources confi...

CVE-2024-52824

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript could be injected by an attacker and executed in a victim’s browser when they visit a page containing the vulnerable field. ...

CVE-2024-52825

Adobe Experience Manager (AEM) 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling malicious JavaScript to run in a viewer’s browser when accessing those fields. Affected component/issue: stored XSS in AEM forms/fields (CVE-2024-...

CVE-2024-52832

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows attacker-supplied JavaScript to be executed in a victim’s browser when visiting pages containing those fields. CVE-2024-52832 is...

CVE-2024-52835

CVE-2024-52835 affects Adobe Experience Manager up to version 6.5.21 (and earlier). It is a stored Cross-Site Scripting (XSS) vulnerability where attacker-supplied input in vulnerable form fields can inject JavaScript executed in a victim’s browser. The CVE is documented with a CVSS v3.1 base sco...

CVE-2024-52845

Adobe Experience Manager (AEM) with versions 6.5.21 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-52845). The issue arises in vulnerable form fields where attacker-supplied input stored on the server can inject malicious JavaScript, which is executed in a ...

CVE-2025-46888

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low‑privileged attacker to inject malicious JavaScript, which would execute in a victim’s browser when visiting a page contain...

CVE-2025-46895

CVE-2025-46895 : Adobe Experience Manager (AEM) 6.5.22 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which are executed in a victim’s browser when visiting the affected page. The linked d...

CVE-2025-46908

CVE-2025-46908 affects Adobe Experience Manager 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the affected page. The CVE is documented with a stored XSS...

CVE-2025-46913

CVE-2025-46913 affects Adobe Experience Manager (AEM) versions 6.5.22 and earlier, with a stored XSS in vulnerable form fields. The root cause is stored cross-site scripting allowing high-privilege attackers to inject JavaScript that executes in victims’ browsers when visiting affected pages. Imp...

CVE-2025-46943

CVE-2025-46943 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) in vulnerable form fields, enabling a low-privileged attacker to inject malicious JavaScript that executes in a victim’s browser when visiting the affected page. The ...

CVE-2025-46950

CVE-2025-46950 describes a stored Cross‑Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue allows a low‑privileged attacker to inject malicious JavaScript into vulnerable form fields; when a user visits the affected page, the script can exe...

CVE-2025-46986

CVE-2025-46986 affects Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored XSS in vulnerable form fields. The vulnerability allows a low-privileged attacker, via a page containing the vulnerable field, to inject and execute malicious JavaScript in a victim’s browser. CVSS 3.1 base sco...

CVE-2025-47013

CVE-2025-47013 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser w...

CVE-2025-47038

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which executes in a victim’s browser when visiting the affected page. Remediati...

CVE-2025-47039

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing a low-privileged attacker to inject malicious JavaScript and have it execute in a victim’s browser when visiting the page containing the field. A...

CVE-2025-47066

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-47066). The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which could execute in a victim’s browser when visi...

CVE-2025-47067

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2025-47067) that can be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields, causing JavaScript execution in a victim’s brow...

CVE-2025-47071

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored cross-site scripting (XSS) vulnerability in vulnerable form fields. Root cause: improper input handling allows injected JavaScript to execute in a victim’s browser when loading the page containing the vulnerable field. Impa...

CVE-2025-47082

CVE-2025-47082 covers a stored XSS flaw in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The vulnerability affects vulnerable form fields where untrusted input can be stored and later reflected, allowing a low-privilege attacker to inject JavaScript that executes in victims’ browser...

CVE-2026-47977

Adobe Experience Manager versions 6.5.24, LTS SP1, and 2026.04 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privileged attacker can inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executed in a victim’s browser wh...

CVE-2024-36155

CVE-2024-36155 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, where a stored XSS vulnerability could allow an attacker to inject malicious scripts into vulnerable form fields, leading to JavaScript execution in a victim’s browser. The NVD entry reports a MEDIUM severity (CVSS 3.1: 5.4...

CVE-2024-43724

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a DOM-based XSS vulnerability (CVE-2024-43724) that could allow arbitrary JavaScript execution in a victim’s browser when a crafted URL or input manipulates the DOM. The issue requires user interaction and the vulnerability is asso...

CVE-2024-43726

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Malicious JavaScript can execute in a victim’s browser when they visit a page containing the vulnerable field. Connected documents corroborate th...

CVE-2024-43730

CVE-2024-43730 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows attackers to inject malicious scripts into fields on pages, resulting in malicious JavaScript execution i...

CVE-2024-43747

CVE-2024-43747 affects Adobe Experience Manager (AEM) versions 6.5.21 and earlier with a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when a page containing the vulnerable field is accessed...

CVE-2024-52859

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to execute in a victim’s browser when visiting the affected page. The public details identify the affected componen...

CVE-2025-46854

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript that may execute in a victim’s browser when visiting a page containing the vulne...

CVE-2025-46866

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which may execute in a victim’s browser when they visit the affected page and interact with the...

CVE-2025-46872

Adobe Experience Manager (AEM) 6.5.22 and earlier versions contain a stored Cross‑Site Scripting (XSS) flaw in vulnerable form fields. According to multiple sources, an attacker with low privileges can inject malicious scripts, which may execute in a victim’s browser when visiting the affected pa...

CVE-2025-46880

CVE-2025-46880 is a stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The issue allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields, which can execute in a victim’s browser when visiting the affec...

CVE-2025-46884

CVE-2025-46884 affects Adobe Experience Manager (AEM) 6.5.22 and earlier with a stored XSS in vulnerable form fields. High-privilege attackers can inject JavaScript, possibly executing it in victims’ browsers when visiting the affected page. The vulnerability is documented across multiple sources...

CVE-2025-46886

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker to inject malicious scripts that run in a victim’s browser after visiting a page with the vulnerable fie...