JVN#21388501 ColdFusion vulnerable to cross-site scripting

ColdFusion from Adobe is a software to develop web applications. ColdFusion contains a cross-site scripting vulnerability.

This vulnerability is different from JVN#28356427 and JVN#48566866.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

**Update the Software **
Apply the latest update provided by the vendor.
For more information, refer to the vendor’s website.

Products Affected

• ColdFusion 8.0.1 and earlier