Description
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | ColdFusion | unspecified – ≤ 2016.16, unspecified – ≤ 2018.10, unspecified – ≤ 2021.0.0.323925, unspecified – ≤ None | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Adobe ColdFusion - Cross-Site Scripting http/cves/2021/CVE-2021-21087.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.