| Package | Affected versions | Patched versions |
|---|---|---|
| coldfusion | = 2023= 2025 |
ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free