PT-2026-144812
CVE-2026-121910
·
Published
2026-11-10
·
Updated
2026-11-11
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Adobe Connect (affected versions not specified)
Description
Cross-Site Scripting (XSS) occurs when an application includes untrusted data in a web page without proper validation or escaping, allowing an attacker to execute malicious scripts in the victim's browser. A low-privileged attacker can trick a victim into visiting a URL that references a vulnerable page, leading to the execution of malicious JavaScript content within the context of the victim's browser.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾