Volerion logoVolerion
Volerion logoVolerion

Adobe Connect Reflected Cross-Site Scripting Vulnerability

Vulnerability

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Adobe Connect versions 2025.3, 12.10 and earlier. This vulnerability allows an attacker to execute malicious JavaScript in the context of the victim's browser by convincing them to visit a URL that references a vulnerable page.

Impact

Exploitation of this vulnerability allows for arbitrary code execution in the context of the user's browser.

Remediation

Users are advised to update to Adobe Connect version 12.11 or the Adobe Connect Desktop Application version 2025.9. Release notes for these versions are available on the Adobe website.

Added: Apr 14, 2026, 10:33 PM
Updated: Apr 14, 2026, 10:33 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
1.7
exploitability
6.4
remediation
7.7
relevance
5.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.