Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version
At a glance
Severity
MEDIUM 6.1
EPSS
EPSS 84.81 % · percentile 100 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
adobe
NVD status
Modified
Description
Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
