CVE-2021-27517

The CVE-2021-27517 issue affects Foxit PDF SDK for Web (up to version 7.5.0). The root cause is the handling of PDFs containing embedded Acrobat JavaScript (specifically app.alert), which enables Cross-Site Scripting (XSS) in the browser when a victim uploads a malicious PDF. The documents consis...