Pdf Editor Cloud (Foxit) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-02-03. Vendor: Foxit.
CVEs of Pdf Editor Cloud
- CVE-2026-1592 - CVSS 6.3 (medium), 2026-02-03: Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded…
- CVE-2026-1591 - CVSS 6.3 (medium), 2026-02-03: Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the…
- CVE-2025-66522 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application…
- CVE-2025-66521 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as…
- CVE-2025-66520 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files…
- CVE-2025-66519 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into…
- CVE-2025-66502 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the…
- CVE-2025-66501 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted…
- CVE-2025-66500 - CVSS 6.3 (medium), 2025-12-19: A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly…
