CVE-2025-51966

A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools versions through 7.1.1 . The flaw is caused by improper handling of PDF files, which allows embedded JavaScript to execute within the application's privileged context when a user previews a specially craf...