CVE-2024-54039

Summary

CVE-2024-54039 is a newly disclosed vulnerability that impacts Adobe Connect versions 12.6 and 11.4.7, and possibly older editions. This issue constitutes a stored Cross-Site Scripting (XSS) vulnerability, enabling attackers to inject malicious scripts into specific form fields. By exploiting this flaw, adversaries can gain the ability to execute malicious JavaScript code in a victim's web browser when they visit a page containing the vulnerable form field. Users are strongly advised to upgrade their Adobe Connect installations to the latest patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.