I created simple Coldfusion forms for online use that have been working for a long time with no problems. Suddenly I have been getting blank Coldfusion forms through email along with the valid Coldfusion forms. They are coming in like spam. I noticed that javascript which I didn't have in my form is being added in the head tags after I have uploaded the form to the server. When the valid Coldfusion forms come through email they contain only a portion of the page which is the form field with information entered by the user. The valid forms contain no logo/graphics, etc. When I receive the forms that are blank contain, they contain the whole web page logo/graphics, etc.
I have enclosed 2 images of the script that has been injected into the head tags on one of the forms.
Does Coldfusion add javascript to the head tags after you upload forms to the server as I have never noticed this before?
