CVE-2005-4383: Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote at...

Security readout for executives and security teams

CVE-2005-4383 is a cross-site scripting issue in CitySoft Community Enterprise 4.x. A remote attacker could cause the application to render attacker-supplied script or HTML through multiple index.cfm parameters. Business risk depends on whether this legacy web application is still deployed and reachable. Exposure is likely limited to organizations still running CitySoft Community Enterprise 4.x, especially internet-facing instances with index.cfm endpoints accepting the listed parameters. The source bundle does not identify hosted services, downstream products, or exact vulnerable build ranges. Treat this as a legacy application exposure issue. It is not reported as actively exploited in the provided sources, but any internet-facing instance could support session theft, phishing, or content injection against users. Mitigation focus: Check CitySoft or archived vendor guidance for an official fix or upgrade path.; Retire, replace, or isolate unsupported Community Enterprise 4.x deployments.; Output-encode reflected user-controlled values if maintaining the application code..

Prepared

Jun 29, 2026, 15:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.