Medium
5.4
Adobe Connect | Cross-site Scripting (XSS) (CWE-79)
CVE-2026-121910
First seen on SecPulse
Summary
Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| AdobeAdobe Connect |
≤ 12.12→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
References
- web psirt@adobe.com