https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T20:13:46.880896+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-49542 CVE-2025-49542 — ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) 2026-10-01T20:13:46.942652+00:00

Affected: Adobe ColdFusion

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser, scope is changed. The vulnerable component is restricted to internal IP addresses.