CVE-2025-13307 Ocean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal Conditions

The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic. These modals can be displayed under user-controlled conditions that Editors and Administrators can set editpages capability. The conditions are then executed as part of an eval...

CVE-2023-53950: Unrestricted Upload of File with Dangerous Type

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload...

CVE-2025-66522: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

CVE-2025-66493: Use After Free

A use-after-free vulnerability exists in the AcroForm handling of Foxit PDF Reader and Foxit PDF Editor before 2025.2.1,14.0.1 and 13.2.1 on Windows . When opening a PDF containing specially crafted JavaScript, a pointer to memory that has already been freed may be accessed or dereferenced,...

CVE-2025-13941: Incorrect Permission Assignment for Critical Resource

A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which...

PT-2025-54497

Уязвимость программы для просмотра электронных документов в стандарте PDF Foxit PDF Reader ранее Foxit Reader и программы редактирования PDF-файлов Foxit PDF Editor ранее Foxit PhantomPDF связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю...

Foxit PDF Editor for Mac < 13.2.2 / 14.0.2 / 2025.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 2025.3/14.0.2/13.2.2. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead...

Foxit PDF Editor Installation Uncontrolled Search Path Privilege Escalation Vulnerability

Talos Vulnerability Report TALOS-2025-2275 Foxit PDF Editor Installation Uncontrolled Search Path Privilege Escalation Vulnerability December 19, 2025 CVE Number CVE-2025-57779 SUMMARY A privilege escalation vulnerability exists during the installation of Foxit PDF Editor via the Microsoft Store....

PT-2025-52434

A stored cross-site scripting XSS vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud pdfonline.foxit.com. The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result,...

PT-2025-52432

A stored cross-site scripting XSS vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud pdfonline.foxit.com. User-supplied SVG files are not properly sanitized or validated before being inserted into the HTML structure. As a result, embedded HTML or JavaScript within a craft...

Foxit PDF Reader and Foxit PDF Editor security vulnerabilities

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit, a Chinese company.Foxit PDF Reader is a PDF reader.Foxit PDF Editor is a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor. The vulnerability stems from an improperly assigned file system privileg...

Foxit PDF Reader and Foxit PDF Editor security vulnerabilities

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit, a Chinese company.Foxit PDF Reader is a PDF reader.Foxit PDF Editor is a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor versions prior to 2025.2.1, prior to 14.0.1, and prior to 13.2.1, which...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor that stems from improperly cleaned inputs in the page template feature, which could lead to stored cross-site scripting...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor, which stems from a user-supplied SVG file in the Portfolio feature that is not properly cleaned or validated, which could lead to a stored cross-site scripting attack...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor, which stems from improperly cleaned inputs in the layer import function, which could lead to stored cross-site scripting...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor, which stems from the certificate name not being properly cleaned up in the Trusted Certificates feature, which could lead to a stored cross-site scripting attack...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor that stems from the Common Name field in the Digital IDs feature not being properly cleaned or encoded, which could lead to a stored cross-site scripting attack...

InnovaStudio WYSIWYG Editor code-related vulnerabilities

InnovaStudio WYSIWYG Editor is a rich text editor from InnovaStudio, Inc. A code issue vulnerability exists in InnovaStudio WYSIWYG Editor version 5.4, which stems from a file upload restriction bypass that could lead to the upload of malicious files...

Foxit PDF Editor security vulnerabilities

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit PDF Editor, which stems from the postMessage handler not validating the source of a message, and could lead to stored cross-site scripting...

CVE-2025-66520: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud pdfonline.foxit.com. User-supplied SVG files are not properly sanitized or validated before being inserted into the HTML structure. As a result, embedded HTML or JavaScript within a craft...