Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-104350 EUVD-2026-111227GHSA-mcf8-5pc2-3wxx

Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

Published Oct 27, 2026 · Updated Nov 2, 2026 · Assigned by adobe

Description

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Affected products

VendorProductAffectedFixed
Adobe Adobe Campaign Classic ≤ 7.4.4 build 9402 7.4.4 build 9403

References