Volerion logoVolerion
Volerion logoVolerion

Foxit PDF Editor Cloud Stored Cross-Site Scripting Vulnerability

Vulnerability

A stored cross-site scripting vulnerability has been identified in Foxit PDF Editor Cloud (pdfonline) prior to February 3, 2026. The issue arises in the file upload feature, where a malicious username can be injected into the upload file list without proper escaping. This flaw allows for the execution of arbitrary JavaScript when the list is viewed.

Impact

Exploitation of this vulnerability could lead to the execution of arbitrary JavaScript in the context of the user's browser.

Remediation

Foxit PDF Editor Cloud has been updated to address this vulnerability. Users can download the latest version from the Foxit website.

Added: Feb 3, 2026, 8:20 AM
Updated: Feb 3, 2026, 9:21 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
5.0
remediation
0.0
relevance
2.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.