CVE-2026-48320

Name of the Vulnerable Software and Affected Versions ColdFusion (affected versions not specified)

Description ColdFusion is affected by a reflected Cross-Site Scripting (XSS) issue, which occurs when an application includes untrusted data in a web page without proper validation or encoding. A remote attacker could exploit this to inject malicious scripts into a web page, potentially gaining elevated privileges or control over the victim's account or session. Exploitation requires user interaction, specifically that the victim opens a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.