CVE-2024-54046 MEDIUM

CVE-2024-54046: Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Vendor Adobe

Product Adobe Connect

Weakness CWE-79 · XSS

Published December 10, 2024

Last update January 7, 2025

View on NVD All CVEs

CVSS base score

6.1/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Key dates

02Disclosure timeline

December 10, 2024 CVE published

January 7, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-54046 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-2103 Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments CVE-2022-47596 WordPress Media Library Categories Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS) CVE-2025-22516 WordPress Metadata SEO plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-54257 WordPress tydskrif theme <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2016-20066 WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting