6.3Mittel
CVE-2026-1592Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud
Beschreibung
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced. This issue affects pdfonline.foxit.com: before 2026‑02‑03.
Schwachstellentyp (CWE):
CWE-79
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| foxit | pdf editor cloud | < 2026-02-03 | |
| Foxit Software Inc. | pdfonline.foxit.com | before 2026‑02‑03 |
Referenzen und Patches
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*< 2026-02-03