Security Advisory

CVE-2025-66521

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-19 07:33:01

Last updated 2025-12-19 16:06:20

Assigner Foxit

State PUBLISHED

Description

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the Trusted Certificates view is loaded.

← Browse all CVEs View on cve.org ↗