Records917All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high716CVSS 7.0–8.9
Exploited now
Foxit records in CISA KEVNo Foxit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 28
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00233 · Published 2026-02-03 · No fix listed CWE-79
Priority LOW 28
Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00233 · Published 2026-02-03 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com).
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00179 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00114 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com).
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00179 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00179 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00179 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00179 · Published 2025-12-19 · No fix listed CWE-79
Priority LOW 27
A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00207 · Published 2025-12-19 · No fix listed CWE-79
THREATIST.IORead the docs