CVE-2025-30314

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 12.8 and earlier

Description: A stored Cross-Site Scripting (XSS) vulnerability affects Adobe Connect, allowing an attacker to inject malicious scripts into vulnerable form fields. When a victim accesses the page containing the vulnerable field, malicious JavaScript may be executed in their browser.

Recommendations: For Adobe Connect versions 12.8 and earlier, consider disabling vulnerable form fields until a patch is available to prevent malicious script injection. Restrict access to potentially vulnerable pages to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.