CVE-2021-27517: Improper Neutralization of Input During Web Page Generation

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert in the Acrobat JavaScript API...

PT-2021-17490

Name of the Vulnerable Software and Affected Versions Foxit PDF SDK For Web versions prior to 7.5.1 is not specified, however, Foxit PDF SDK For Web through 7.5.0 is mentioned as vulnerable. Foxit PDF SDK For Web versions through 7.5.0 Description The issue allows for arbitrary JavaScript code...