Beveiligingsadvies

CVE-2025-66519

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-19 07:27:54

Laatst bijgewerkt 2025-12-19 14:42:10

Toegewezen door Foxit

CVSS-score 6.3

Status PUBLISHED

Beschrijving

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected script executes when the Layers panel is accessed.

← Alle CVE's bekijken Bekijk op cve.org ↗