CVE-2025-63917

The PDFPatcher executable, in versions through 1.1.3.4663 , is vulnerable to an XML External Entity (XXE) injection due to the XML bookmark import functionality. The software uses the .NET XmlDocument class without disabling external entity resolution. This flaw allows attackers to read arbitrary...