Adobe Connect Stored Cross-Site Scripting Vulnerability

A stored Cross-Site Scripting vulnerability has been identified in Adobe Connect versions 12.8 and earlier. This vulnerability allows low-privileged attackers to inject malicious scripts into vulnerable form fields. When a victim accesses the page containing the compromised field, the injected JavaScript is executed in their browser.

Impact

Exploitation of this vulnerability allows for stored Cross-Site Scripting, where injected scripts are executed in the context of the user viewing the affected page.