CVE-2026-47982

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A DOM-based Cross-Site Scripting (XSS) issue exists due to insufficient protection of the web page structure. This allows a remote attacker to execute arbitrary JavaScript code within the context of a victim's browser by manipulating the Document Object Model (DOM) environment. Exploitation requires user interaction, specifically that the victim visits a specially crafted webpage.

Recommendations Update to a version later than 6.5.24, LTS SP1, and 2026.04.