Pdf Editor Cloud
Approved changes feed: RSS · Atom
cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Foxit (3778a6df-af29-5bee-a995-959672e13d77) |
|---|---|
| Product | Pdf Editor Cloud (a6c7aed3-6c07-5921-8098-5c6a526bf1f9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1592 |
vulnerable | 2026-06-08 07:49:08.963890 |
Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud
MEDIUM (6.3)
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced.
This issue affects pdfonline.foxit.com: before 2026‑02‑03.
Published: 2026-02-03T07:59:13.097Z
Updated: 2026-02-04T16:09:38.510Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-1591 |
vulnerable | 2026-06-08 07:49:08.963292 |
Stored XSS via Attachments Feature in https://pdfonline.foxit.com/
MEDIUM (6.3)
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed.
This issue affects pdfonline.foxit.com: before 2026‑02‑03.
Published: 2026-02-03T07:57:27.281Z
Updated: 2026-02-03T18:47:39.727Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66522 |
vulnerable | 2026-06-08 07:41:19.112636 |
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field
MEDIUM (6.3)
A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affected PDF is loaded.
Published: 2025-12-19T07:34:29.208Z
Updated: 2025-12-19T14:36:38.557Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66521 |
vulnerable | 2026-06-08 07:41:19.112223 |
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature
MEDIUM (6.3)
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the Trusted Certificates view is loaded.
Published: 2025-12-19T07:33:01.761Z
Updated: 2025-12-19T16:06:20.379Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66520 |
vulnerable | 2026-06-08 07:41:19.111807 |
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG Handling
MEDIUM (6.3)
A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files are not properly sanitized or validated before being inserted into the HTML structure. As a result, embedded HTML or JavaScript within a crafted SVG may execute whenever the Portfolio file list is rendered.
Published: 2025-12-19T07:30:20.745Z
Updated: 2025-12-19T14:41:00.364Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66519 |
vulnerable | 2026-06-08 07:41:19.111288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66502 |
vulnerable | 2026-06-08 07:41:19.072573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66501 |
vulnerable | 2026-06-08 07:41:19.071999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-66500 |
vulnerable | 2026-06-08 07:41:19.070662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.