Medium severityNVD Advisory· Published Dec 15, 2025· Updated Apr 15, 2026

CVE-2023-53880

Description

Lucee 5.4.2.17 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through administrative interface parameters. Attackers can craft specific payloads targeting admin pages like server.cfm and web.cfm to execute arbitrary JavaScript in victim's browser sessions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lucee/Luceellm-fuzzy
Range: = 5.4.2.17

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51668nvd
www.lucee.orgnvd
www.vulncheck.com/advisories/lucee-authenticated-reflected-cross-site-scripting-via-admin-interfacesnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000