CVE Intelligence

Vulnerabilidades do Foxit Software Inc. Webplugins.foxit.com

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Foxit Software Inc. Webplugins.foxit.com: 1 registro(s), com versões afetadas e correções.

CVE-2025-66500 Média · 5.4 CWE-79 19/12/2025
Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability
A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assigns externalPath to a script source, allowing an attacker to execute arbitrary JavaScript when a crafted postMessage is received.