CVE-2025-30292

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdfty7imr2u 2025-04-09 00:02:49+00:00| seen| https://t.me/cvedetector/22518...

CVE-2025-30292

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...