CVE Intelligence

Foxit Software Inc. Webplugins.foxit.com vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Foxit Software Inc. Webplugins.foxit.com: 1 record(s), with affected versions and fixes.

CVE-2025-66500 Medium · 5.4 CWE-79 Dec 19, 2025
Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability
A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assigns externalPath to a script source, allowing an attacker to execute arbitrary JavaScript when a crafted postMessage is received.