CVE-2026-1591

creationtimestamp| type| source ---|---|--- 2026-02-03 16:48:40+00:00| seen| https://threatintel.cc/2026/02/03/foxit-pdf-editor-vulnerabilities-let.html 2026-02-03 17:48:33+00:00| seen| https://infosec.exchange/users/edwardk/statuses/116007954860312788 2026-02-04 17:20:10+00:00| seen|...

CVE-2026-1591 Stored XSS via Attachments Feature in https://pdfonline.foxit.com/

Foxit PDF Editor Cloud pdfonline contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed. This issue affects...