CVE-2026-34691

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager Forms JEE versions LTS SP1 Adobe Experience Manager Forms JEE versions prior to 6.5.24.0

Description A stored Cross-Site Scripting (XSS) issue allows an attacker to inject malicious scripts into vulnerable form fields. When a victim visits the page containing the affected field, the malicious JavaScript executes in their browser, which could lead to elevated access or control over the victim's account or session.

Recommendations Update Adobe Experience Manager Forms JEE LTS SP1 to a version containing the fix. Update Adobe Experience Manager Forms JEE to a version later than 6.5.24.0.