CVE-2011-0735

Cross-site scripting XSS vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."...

CVE-2011-0735

Adobe ColdFusion before 9.0.1 CHF1 is vulnerable to cross-site scripting (XSS) via vectors involving a “tag script.” The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide exploit details or remediation steps.