CVE-2026-106630

Summary

Adobe Experience Manager is vulnerable to stored XSS in form fields, allowing attackers to inject malicious scripts that execute in victims' browsers when they view pages containing the compromised data. This can lead to session hijacking and elevated access to user accounts.

Exploitability

Exploitation requires a victim to view a page with compromised form data, making it moderately difficult to achieve but possible through social engineering or by compromising content management workflows.

Blast radius

The vulnerability could impact all users who view pages containing maliciously injected form fields, potentially affecting thousands of users across multiple sites using Adobe Experience Manager.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Adobe Experience Manager 2.590 or later to address this stored XSS vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.