CVE-2023-51457

Adobe Experience Manager (AEM) prior to 6.5.19.0 contains a stored XSS vulnerability in form fields due to insufficient filtering/escaping of user input. A low-privilege attacker could inject malicious script, which would execute in a victim’s browser when accessing the vulnerable page. Affected:...

CVE-2025-47040

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker with user interaction to inject malicious JavaScript that can execute in a victim’s browser when visiting a pag...

CVE-2025-47081

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored Cross‑Site Scripting (XSS) vulnerability (CVE-2025-47081). The issue allows a low‑privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executing in a victim’s browser when v...

CVE-2026-47989

Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier are affected by a DOM-based XSS vulnerability. An attacker could leverage DOM manipulation to run malicious JavaScript in a victim’s browser, requiring user interaction (visiting a crafted page). CVSS3.1 shows a base score of ...

CVE-2024-26071

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the field. The issue is documented ...

CVE-2024-36167

CVE-2024-36167 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS (CWE-79) in vulnerable form fields. Malicious JavaScript could run in a victim’s browser when loading the affected page. The CVSSv3.1 base score is 5.4 (Medium) with user interaction required for exploitati...

CVE-2024-36213

CVE-2024-36213 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The vulnerability is a stored cross-site scripting (XSS) flaw in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when visiting a page containing the field...

CVE-2024-36214

CVE-2024-36214 affects Adobe Experience Manager (AEM) 6.5.20 and earlier, with a stored XSS in vulnerable form fields. An attacker could inject malicious scripts that execute in a victim’s browser when visiting a page containing the vulnerable field. CVSS 3.1 base score: 5.4 (Medium). The linked ...

CVE-2024-41845

CVE-2024-41845 concerns Adobe Experience Manager (AEM) versions 6.5.20 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The public description states malicious JavaScript can be executed in a victim’s browser when visiting a page cont...

CVE-2024-41875

CVE-2024-41875 affects Adobe Experience Manager versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject malicious scripts that execute in a victim’s browser when loading the page containing the field. Pu...

CVE-2024-43743

CVE-2024-43743 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw, arising from insufficient protection of the web page structure that can allow an attacker to inject malicious scripts into vulnerable form fields, leading to ma...

CVE-2024-52827

Adobe Experience Manager (AEM) 6.5.21 and earlier contains a stored XSS vulnerability in vulnerable form fields that could allow an attacker to inject malicious JavaScript and cause it to execute in a victim’s browser. Affected versions are explicitly listed as 6.5.21 and earlier; remediation is ...

CVE-2025-46999

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue can be exploited by a low-privileged attacker with user interaction to inject malicious JavaScript, which may execute in the victim’s b...

CVE-2025-47055

Adobe Experience Manager 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript that may execute in a victim’s browser when visiting a page containing the field. The CVE is documente...

CVE-2025-47057

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored XSS vulnerability (CVE-2025-47057). The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript executed in a victim’s browser when visiting the page con...

CVE-2024-26077

Adobe Experience Manager (AEM) 6.5.20 and earlier is affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing malicious JavaScript to run in a victim’s browser when visiting a page containing the field. The CVE entry (CVE-2024-26077) is active and referenc...

CVE-2024-36142

CVE-2024-36142 affects Adobe Experience Manager (AEM) 6.5.20 and earlier with a stored XSS in vulnerable form fields. The issue allows an attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting a page containing the vulnerable field. The CVSS v3.1 vector indic...

CVE-2024-36159

CVE-2024-36159 affects Adobe Experience Manager 6.5.20 and earlier. It describes a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling an attacker to inject JavaScript that could execute in a victim’s browser when visiting the page containing the field. Mitigation:...

CVE-2024-36166

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross‑Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows an attacker to inject malicious scripts that can run in a victim’s browser when visiting a page containing the vulnerable fiel...

CVE-2024-36188

CVE-2024-36188 affects Adobe Experience Manager (AEM) versions 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing an attacker to inject and execute malicious JavaScript in a victim’s browser when visiting the affected page. The N...

CVE-2024-36205

CVE-2024-36205 affects Adobe Experience Manager (AEM) 6.5.20 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can cause malicious JavaScript to run in a victim’s browser when visiting a page containing the vulnerable field. The AV is netwo...

CVE-2024-41844

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, enabling malicious scripts to execute in a user’s browser. The CVE-2024-41844 entry specifies the issue and its impact; a CVSSv3.1 base score of 5.4 (Medi...

CVE-2024-52816

CVE-2024-52816 affects Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue is a stored XSS vulnerability that allows an attacker to inject malicious scripts into vulnerable form fields, executing in a victim’s browser when visiting the page containing the vulnerable field. Affected produ...

CVE-2024-52848

CVE-2024-52848 describes a stored XSS vulnerability in Adobe Experience Manager (AEM) versions 6.5.21 and earlier. The issue involves vulnerable form fields that can be exploited to inject malicious JavaScript, which may execute in a victim’s browser when visiting the affected page. The connected...

CVE-2025-46848

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields (CVE-2025-46848). The issue allows a low-privileged attacker to inject malicious scripts, which may execute in a user’s browser when visiting a page containing the affected field....

CVE-2025-46850

CVE-2025-46850 affects Adobe Experience Manager 6.5.22 and earlier with a stored XSS in vulnerable form fields. A low-privileged attacker can inject malicious JavaScript, which executes in a victim’s browser when visiting the page containing the field. Adobe-aware advisories (APSB25-48) indicate ...

CVE-2025-46883

CVE-2025-46883 : Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker can inject malicious scripts into vulnerable form fields, which are then executed in a victim’s browser when visiting the affecte...

CVE-2025-46891

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which can execute in a victim’s browser when visiting a page containing the vul...

CVE-2025-46915

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. Exploitation could allow a low-privileged attacker, with user interaction, to inject malicious JavaScript that executes in a victim’s browser whe...

CVE-2025-46946

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious JavaScript that executes in a victim’s browser when visiting a page containing the field. Remediation per APSB25-48 is to apply Adobe’...

CVE-2025-46964

CVE-2025-46964 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The vulnerability is described in sources as a stored XSS flaw in vulnerable form fields that could allow a low-privileged attacker to inject malicious scripts, with malicious JavaScript potentially executed in a victim’s b...

CVE-2025-46978

CVE-2025-46978 affects Adobe Experience Manager versions 6.5.22 and earlier, with a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields. The underlying issue allows a low-privileged attacker, with some user interaction, to inject malicious JavaScript that runs in a victim’s browser w...

CVE-2025-47078

Adobe Experience Manager (AEM) versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript that can execute in a victim’s browser when visiting pages containing t...

CVE-2024-26115

Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by a reflected Cross‑Site Scripting (XSS) vulnerability. The issue occurs when a victim visits a specially crafted URL referencing a vulnerable page, allowing malicious JavaScript to execute in the victim’s browser context. I...

CVE-2024-36174

Adobe Experience Manager (AEM) 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields, allowing attacker-injected JavaScript to run in a victim’s browser when visiting the page containing the field. The CVSS 3.1BaseScore is 5.4 (Medium) with...

CVE-2024-41877

CVE-2024-41877 affects Adobe Experience Manager (AEM) 6.5.19 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) flaw in vulnerable form fields, allowing malicious JavaScript to run in a victim’s browser when the page with the field is loaded. The issue is confirmed across multi...

CVE-2024-43718

Adobe Experience Manager (AEM) 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-43718). Malicious JavaScript can execute in a user’s browser when they load a page containing a vulnerable form field. The issue is addressed by the APSB24-69 update; upgr...

CVE-2024-43738

CVE-2024-43738 affects Adobe Experience Manager 6.5.21 and earlier with a DOM-based XSS in which data from a malicious source is written into the DOM, allowing script execution in the victim’s browser after user interaction. The CVSS v3.1 base score is 5.4 (MEDIUM); attack vector NETWORK, user in...

CVE-2024-43745

CVE-2024-43745 is a reflected Cross‑Site Scripting (XSS) vulnerability affecting Adobe Experience Manager (AEM) 6.5.21 and earlier. The issue allows an attacker to persuade a user to visit a crafted URL, potentially causing malicious JavaScript to execute in the victim’s browser. Connected source...

CVE-2024-52826

CVE-2024-52826: A stored XSS in Adobe Experience Manager (AEM) affects versions up to 6.5.21 and earlier. The vulnerability arises from insecure handling of form field input, allowing an attacker to inject JavaScript that executes in a victim’s browser when visiting a page containing the vulnerab...

CVE-2024-52853

CVE-2024-52853 affects Adobe Experience Manager 6.5.21 and earlier with a stored XSS vulnerability in vulnerable form fields. An attacker could inject malicious scripts executed in a victims browser when accessing the affected page. Remediation visible in advisory APSB24-69; update to 6.5.22 or ...

CVE-2025-46841

CVE-2025-46841 concerns Adobe Experience Manager (AEM) 6.5.22 and earlier, which are affected by a stored Cross-Site Scripting (XSS) vulnerability. The issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields, with malicious JavaScript potentially executing w...

CVE-2025-46857

Adobe Experience Manager (AEM) 6.5.22 and earlier is affected by a reflected Cross-Site Scripting (XSS) vulnerability. A low-privilege attacker can lure a victim to a URL referencing a vulnerable page, causing malicious JavaScript to run in the victim’s browser. CVSSv3.1: 5.4 (Medium) with networ...

CVE-2025-46861

Adobe Experience Manager 6.5.22 and earlier are affected by a stored XSS vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, with execution in a victim’s browser when visiting a page containing the field. Remediation is provided by Adobe APSB25-48 se...

CVE-2025-46895

CVE-2025-46895 : Adobe Experience Manager (AEM) 6.5.22 and earlier contains a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which are executed in a victim’s browser when visiting the affected page. The linked d...

CVE-2025-46908

CVE-2025-46908 affects Adobe Experience Manager 6.5.22 and earlier. The issue is a stored XSS in vulnerable form fields, exploitable by a low-privileged attacker to inject malicious JavaScript that runs in a victim’s browser when visiting the affected page. The CVE is documented with a stored XSS...

CVE-2025-46981

CVE-2025-46981 affects Adobe Experience Manager (AEM) 6.5.22 and earlier. The issue is a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields that can be exploited by a low-privilege attacker to inject malicious JavaScript, which may execute in a victim’s browser when visitin...

CVE-2025-46990

Adobe Experience Manager 6.5.22 and earlier is affected by a stored XSS vulnerability in vulnerable form fields. A low-privilege attacker with user interaction could inject malicious JavaScript that executes in a victim’s browser. The issue is documented across multiple feeds (CVE-2025-46990) wit...

CVE-2025-47013

CVE-2025-47013 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier, affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The underlying issue allows a low-privileged attacker to inject malicious scripts, which may execute in a victim’s browser w...

CVE-2025-47038

Adobe Experience Manager (AEM) 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability in vulnerable form fields. The issue allows a low-privileged attacker to inject malicious JavaScript, which executes in a victim’s browser when visiting the affected page. Remediati...