Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
Adobe Campaign Classic (ACC), a marketing automation platform, is affected by a reflected cross-site scripting flaw that could let an attacker run malicious scripts in a user's browser. Successful exploitation could allow the attacker to gain elevated access to or control over a victim's account or session, but only if the victim visits a crafted link or interacts with a compromised page.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Affected versions
- Adobe Adobe Campaign Classic
through 7.4.4 build 9402