Foxit Pdf Editor Cloud

9 CVEs affecting Foxit Pdf Editor Cloud. Latest disclosed: 2026-02-03. Critical: 0, High: 0.

Top CVEs affecting Foxit Pdf Editor Cloud
CVESeverityScorePublishedSummary
CVE-2026-1592Medium6.32026-02-03Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded int…
CVE-2026-1591Medium6.32026-02-03Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the u…
CVE-2025-66522Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application…
CVE-2025-66521Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as t…
CVE-2025-66520Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files…
CVE-2025-66519Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into t…
CVE-2025-66502Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the templ…
CVE-2025-66501Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payloa…
CVE-2025-66500Medium6.32025-12-19A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assig…