Threats tagged 'ghsa-3q54-3gqx-2385'

Adobe Connect contains a stored Cross-Site Scripting (XSS) vulnerability that allows a low-privileged attacker to inject malicious JavaScript into vulnerable form fields. When a victim accesses the affected page, the malicious script executes in their browser, potentially enabling the attacker to escalate privileges or take control of the victim's account or session. This vulnerability has a critical severity rating with a high impact on confidentiality and integrity.