{"cvss":6.1,"datePublished":"2025-12-26T00:00:00Z","dateUpdated":"2025-12-26T00:00:00Z","description":"Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.","dueDate":"","id":"CVE-2023-44352","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ColdFusion","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"MEDIUM","source":"vulncheck_kev","title":"Adobe ColdFusion Improper Neutralization of Input During Web Page Generation","vendor":"Adobe"}