CVE-2026-47962

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A stored Cross-Site Scripting (XSS) issue exists where a low-privileged attacker can inject malicious scripts into vulnerable form fields. This occurs due to a failure to protect the web page structure, which may allow a remote attacker to execute arbitrary code or malicious JavaScript in a victim's browser when they visit the page containing the affected field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.