Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/12/20 8:14 a.m.4 views

CVE-2025-66519

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS5.7AI score0.00026EPSS
Exploits0References1
OSV
OSV
added 2025/12/19 8:15 a.m.0 views

CVE-2025-66519

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

5.4CVSS5.7AI score
Exploits0References1
NVD
NVD
added 2025/12/19 8:15 a.m.1 views

CVE-2025-66519

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/12/19 7:27 a.m.6 views

CVE-2025-66519

The CVE-2025-66519 issue affects pdfonline.foxit.com, specifically the Layer Import functionality, where a crafted payload placed in the Create new Layer field is later rendered into the DOM without proper sanitization. This leads to stored XSS, with script execution when the Layers panel is acce...

6.3CVSS5.3AI score0.00026EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/19 7:27 a.m.20 views

CVE-2025-66519 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/19 7:27 a.m.1 views

CVE-2025-66519 Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS5.3AI score0.00026EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/19 7:27 a.m.1 views

EUVD-2025-204457

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS5.2AI score0.00026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.1 views

PT-2025-52431

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected...

6.3CVSS5.7AI score0.00026EPSS
Exploits0References2
Rows per page
Query Builder