CVE-2026-48304

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.5.24, LTS SP1, 2026.04 and earlier

Description A stored Cross-Site Scripting (XSS) issue exists due to improper protection of the web page structure. This allows a low-privileged remote attacker to inject malicious scripts into vulnerable form fields. The malicious JavaScript is executed in the victim's browser when they visit the page containing the affected field.

Recommendations Update to a version later than 6.5.24, LTS SP1, and 2026.04.