CVEvulnerability

CVE-2025-66522

5.4 MEDIUM Published 2025-12-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-12-19
Last modified
2026-06-17
Assigner
14984358-7092-470d-8f34-ade47a7658a2
CVSS 3.1 (14984358-7092-470d-8f34-ade47a7658a2)
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affected PDF is loaded.

Affected configurations

• foxit pdf editor cloud (<= 2025-12-01)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References