CVE-2025-49543

creationtimestamp| type| source ---|---|--- 2025-07-08 21:18:51+00:00| seen| Telegram/xximOvAVOOqyQbudyc2KRM0HfnX40RC9STY4MOwooP0yP0...

CVE-2025-49543 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they...