CVE-2025-30292
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Vendor
Product
CWE
Yayın Tarihi
2025-04-08 20:15:27
Güncelleme
2025-04-14 15:57:32
Source Identifier
psirt@adobe.com
KEV Date Added
-