CVE-2025-30316: Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30316?
CVE-2025-30316 is classified as a moderate-severity vulnerability due to its potential to allow stored cross-site scripting attacks.
How do I fix CVE-2025-30316?
To fix CVE-2025-30316, upgrade Adobe Connect to the latest version beyond 12.8 to mitigate the stored XSS vulnerability.
Who is affected by CVE-2025-30316?
CVE-2025-30316 affects users of Adobe Connect versions 12.8 and earlier.
What type of vulnerability is CVE-2025-30316?
CVE-2025-30316 is a stored Cross-Site Scripting (XSS) vulnerability.
What actions can attackers take with CVE-2025-30316?
Attackers could exploit CVE-2025-30316 to inject malicious scripts into vulnerable form fields, leading to potential execution in victims' browsers.