CVE-2021-21080 — Cross-site Scripting in Adobe Connect

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.9%
top 24.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Connect
Timeline
PublishedMar 12
Latest updateMay 24

Description

Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5adobe/connectunspecified — 11.0.7+1
▶NVDadobe/connect11.0.7

🔴Vulnerability Details

2
GHSA
GHSA-32xg-2hj3-q32w: Adobe Connect version 11↗2022-05-24
▶
CVEList
Adobe Connect Reflected Cross-site Scripting via query parameter↗2021-03-12
▶
CVE-2021-21080 — Cross-site Scripting in Adobe Connect | cvebase