CVE-2026-47983 is a DOM-based Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager up to versions 6.5.24, LTS SP1, and 2026.04. An attacker can exploit this by manipulating the DOM environment to execute arbitrary JavaScript code within the context of a victim's browser. The attack requires the victim to interact by visiting a maliciously crafted webpage. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity, with network attack vector, low complexity, privileges required, user interaction required, and a changed scope. No official patch or remediation guidance is currently available from the vendor.

Successful exploitation could lead to partial compromise of confidentiality and integrity of user data within the affected Adobe Experience Manager environment. There is no impact on availability. The attack requires user interaction and privileges, limiting the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted content and avoid visiting suspicious links. Monitor Adobe's official advisories for updates on patches or mitigations.