CVE-2025-49534

Adobe Experience Manager versions 11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Scope is changed.
Configurations

No configuration.

History

10 Jul 2025, 13:18

Type Values Removed Values Added
Summary
  • (es) Las versiones 11.4 y anteriores de Adobe Experience Manager se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS) Almacenado que un atacante con pocos privilegios podría aprovechar para inyectar scripts maliciosos en campos de formulario vulnerables. Es posible que se ejecute JavaScript malicioso en el navegador de la víctima al acceder a la página que contiene el campo vulnerable. Se ha modificado el alcance.

08 Jul 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-08 22:15

Updated : 2025-07-10 13:18


NVD link : CVE-2025-49534

Mitre link : CVE-2025-49534

CVE.ORG link : CVE-2025-49534


JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')