{"cvss":5.4,"datePublished":"2023-11-13T00:00:00Z","dateUpdated":"2023-11-13T00:00:00Z","description":"Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.","dueDate":"","id":"CVE-2021-21087","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ColdFusion","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"MEDIUM","source":"vulncheck_kev","title":"Adobe ColdFusion Improper Neutralization of Input During Web Page Generation","vendor":"Adobe"}