| Package | Affected versions | Patched versions |
|---|---|---|
| connect | < 12.11 | 12.11 |
| connect desktop application | ≤ 2025.3< 2025.9.15 | 2025.9.15 |
Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free