CVE-2025-47110

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Scope is changed to that of other high-privileged accounts, leading to a high impact on confidentiality, integrity, and availability.

• CWE-79

• https://helpx.adobe.com/security/products/magento/apsb25-50.htmlVendor Advisory

Published

Jun 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-47105InDesign Desktop versions ID20.2, ID19.5.3 and earlier are a…5.5
• CVE-2025-47106InDesign Desktop versions ID20.2, ID19.5.3 and earlier are a…5.5
• CVE-2025-47107InCopy versions 20.2, 19.5.3 and earlier are affected by a H…7.8
• CVE-2025-47108Substance3D - Painter versions 11.0.1 and earlier are affect…7.8
• CVE-2025-47109After Effects versions 25.2, 24.6.6 and earlier are affected…5.5
• CVE-2025-4711A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-47111Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.2…5.5
• CVE-2025-47112Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.2…5.5
• CVE-2025-47113Adobe Experience Manager versions 6.5.22 and earlier are aff…5.4
• CVE-2025-47114Adobe Experience Manager versions 6.5.22 and earlier are aff…5.4
• CVE-2025-47115Adobe Experience Manager versions 6.5.22 and earlier are aff…5.4
• CVE-2025-47116Adobe Experience Manager versions 6.5.22 and earlier are aff…5.4