{"id":"CVE-2026-104350","published":"2026-10-27T17:16:55.457","lastModified":"2026-10-27T17:16:55.457","description":"Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/campaign/apsb26-162.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Adobe Campaign Classic contains a reflected XSS vulnerability (CWE-79) where untrusted input from a URL or page interaction is echoed back without proper sanitization, allowing attackers to execute arbitrary scripts in victims' browsers when they click a malicious link.","exploitability":"Exploitation requires social engineering to trick a user into visiting a crafted URL or interacting with a malicious page; no authentication or special privileges are needed.","blast_radius":"Successful exploitation could lead to account takeover, session hijacking, or privilege escalation within Adobe Campaign Classic, potentially compromising sensitive marketing data and campaign configurations.","remediation":"Upgrade to Adobe Campaign Classic version 2.590 or later, where this XSS issue has been patched.","detection":"Defenders should monitor web server access logs for requests containing suspicious script payloads (e.g., <script>, javascript:, onerror=) in query parameters or POST bodies, especially when such requests are followed by browser-initiated navigation to unexpected endpoints. Look for HTTP 200 responses with reflected script fragments in the HTML body.","tags":["xss","web","reflected","session-hijack","account-takeover"],"model":"garnet-coder","analyzedAt":"2026-10-28T10:03:38.397Z"}}