Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2026-104350). This vulnerability allows an attacker to inject malicious scripts into web pages viewed by victims, potentially leading to elevated access or control over the victim's account or session. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a compromised page. The vulnerability has a critical severity with a CVSS score of 9.3.