CVE-2026-48251

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A DOM-based Cross-Site Scripting (XSS) issue exists where the system fails to protect the web page structure. This allows a remote attacker to manipulate the DOM environment to execute arbitrary malicious JavaScript code within the context of the victim's browser. Exploitation requires user interaction, specifically that the victim visits a specially crafted webpage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.