CVE-2026-47935

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24 and earlier Adobe Experience Manager versions LTS SP1 and earlier Adobe Experience Manager versions 2026.04 and earlier

Description A DOM-based Cross-Site Scripting (XSS) issue allows an attacker to execute malicious JavaScript within a victim's browser by manipulating the Document Object Model (DOM) environment. This attack requires user interaction, specifically requiring the victim to visit a specially crafted webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.