CVE-2026-47990

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A stored Cross-Site Scripting (XSS) issue exists where a low-privileged attacker can inject malicious scripts into vulnerable form fields. This occurs because the system fails to properly protect the web page structure. When a victim browses to the page containing the affected field, the malicious JavaScript may be executed in their browser, potentially allowing a remote attacker to execute arbitrary code.

Recommendations Update to a version later than 6.5.24, LTS SP1, and 2026.04.