CVE-2025-63917

The PDFPatcher executable (versions through 1.1.3.4663 ) is vulnerable to an XML External Entity (XXE) injection flaw within its XML bookmark import functionality. The root cause is the application's use of the .NET XmlDocument class without disabling external entity resolution. This flaw allows ...