Adobe Connect DOM-Based Cross-Site Scripting Vulnerability

A DOM-based cross-site scripting vulnerability has been identified in Adobe Connect versions 2025.3, 12.10 and earlier. This vulnerability allows an attacker to manipulate the DOM environment and execute malicious JavaScript in the context of the victim's browser. Exploitation requires user interaction, as the victim must visit a crafted webpage.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the victim's browser.

Remediation

Users are advised to update to Adobe Connect version 12.11 or the Adobe Connect Desktop Application version 2025.9. Release notes for these updates are available on the Adobe website.