Skip to content
OpenAdvisories
Medium WID-SEC-2025-2293 3 CVEs

Adobe Experience Manager: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Published Oct 14, 2025 · Updated Oct 14, 2025 · de-DE

Vendor: Adobe Product: Experience Manager Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Experience Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Adobe Experience Manager (AEM) ist eine Content-Management-Lösung für die Erstellung von Websites, mobilen Anwendungen und Formularen.

Vulnerabilities 3

  • High 7.0
    CVE-2025-54296

    Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

    A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.

    mooj.org ProFiles component for Joomla Web / CMS
  • High 7.0
    CVE-2025-54297

    Extension - compojoom.com - Stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla

    A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered.

    compojoom.com CComment component for Joomla Web / CMS
  • Medium 5.4
    CVE-2025-54272

    Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be execute…

    Adobe Adobe Experience Manager

Revision history

  1. #1

    Initiale Fassung

References