Adobe Experience Manager Stored Cross-Site Scripting Vulnerability

A stored Cross-Site Scripting vulnerability has been identified in Adobe Experience Manager versions 6.5.22 and earlier. This vulnerability allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim views the page containing the affected field, the injected JavaScript may be executed in their browser.

Impact

Exploitation of this vulnerability allows for stored Cross-Site Scripting, where injected scripts are executed in the context of the user viewing the affected page.