Foxit Software Inc. Pdfonline.foxit.com
8 CVEs affecting Foxit Software Inc. Pdfonline.foxit.com. Latest disclosed: 2026-02-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1592 | Medium | 6.3 | 2026-02-03 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded int… |
CVE-2026-1591 | Medium | 6.3 | 2026-02-03 | Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the u… |
CVE-2025-66522 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application… |
CVE-2025-66521 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as t… |
CVE-2025-66520 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files… |
CVE-2025-66519 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into t… |
CVE-2025-66502 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the templ… |
CVE-2025-66501 | Medium | 6.3 | 2025-12-19 | A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payloa… |