CVE-2026-47957

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24 and earlier Adobe Experience Manager versions LTS SP1 and earlier Adobe Experience Manager versions 2026.04 and earlier

Description A stored Cross-Site Scripting (XSS) issue allows a low-privileged attacker to inject malicious scripts into vulnerable form fields. This results in the execution of malicious JavaScript in the browser of a victim who visits the page containing the affected field. This attack involves a change in scope, meaning the script can access data or interact with a different origin than the one that served the original page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.