⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips
60
CVE-2024-54032
- CVSS 3.1
- 9.3 critical
- EPSS
- <1%p55
- Published
- ·
- Modified
Description · NVD
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.