CVE-2025-47082: 
Adobe Experience Manager vulnerability analysis and mitigation

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability identified as CVE-2025-47082. The vulnerability was discovered and initially published on June 10, 2025. This security flaw allows low-privileged attackers to inject malicious scripts into vulnerable form fields (NVD, Wiz).

The vulnerability is classified as a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) with a CVSS v3.1 base score of 5.4 (Medium). The vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N indicates network accessibility, low attack complexity, required low privileges, and necessary user interaction. The vulnerability has been assigned an Exploitation Probability Percentile (EPSS) of 7.1 (NVD, Wiz).

When successfully exploited, this vulnerability enables attackers to inject malicious scripts into vulnerable form fields. The malicious JavaScript executes in the victim's browser when they navigate to the page containing the compromised field, potentially leading to unauthorized data access or manipulation (Wiz).

Adobe has addressed this vulnerability in versions after 6.5.22. Users are strongly advised to update their Adobe Experience Manager installations to the latest version to mitigate this security risk (Wiz).