Volerion logoVolerion
Volerion logoVolerion

Foxit PDF Editor Cloud Stored Cross-Site Scripting Vulnerability in Create New Layer Feature

Vulnerability

A stored cross-site scripting vulnerability has been identified in Foxit PDF Editor Cloud (pdfonline) prior to February 3, 2026. The issue arises in the 'Create New Layer' feature, where unsanitized user input is embedded into the HTML output. This flaw allows for the execution of arbitrary JavaScript when the layer is referenced.

Impact

Exploitation of this vulnerability could lead to the execution of arbitrary JavaScript in the context of the user's browser.

Remediation

Foxit PDF Editor Cloud has been updated to address this vulnerability. Users can download the latest version from the Foxit website.

Added: Feb 3, 2026, 8:19 AM
Updated: Feb 3, 2026, 9:20 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.7
exploitability
5.0
remediation
0.0
relevance
2.5
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.