CVE-2026-47941

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A stored Cross-Site Scripting (XSS) issue exists due to improper protection of the web page structure. This allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses to the page containing the affected field, the malicious JavaScript is executed within their browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.