Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-100643
HistoryJul 23, 2021 - 12:00 a.m.

Foxit PDF SDK For Web Cross-Site Scripting Vulnerability

2021-07-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

38.3%

Foxit PDF SDK For Web is a cross-platform PDF solution that enables fast display, annotation, filling, signing and management of PDF documents on desktop and mobile devices through a web browser.A security vulnerability exists in Foxit PDF SDK For Web, which stems from the fact that if a victim uploads a malicious PDF document that contains abusive app.alert embedded JavaScript code (in the Acrobat JavaScript API), an attacker can exploit the vulnerability to execute arbitrary JavaScript code in the browser.

CPENameOperatorVersion
foxit pdf sdk for webeq7.5.0

0.001 Low

EPSS

Percentile

38.3%

Related for CNVD-2021-100643