6.3Media
CVE-2026-1592Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud
Descripción
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced. This issue affects pdfonline.foxit.com: before 2026‑02‑03.
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| foxit | pdf editor cloud | < 2026-02-03 | |
| Foxit Software Inc. | pdfonline.foxit.com | before 2026‑02‑03 |
Referencias y parches
- https://www.foxit.com/support/security-bulletins.html Vendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*< 2026-02-03