Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature
Vulnerability Description
A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the Trusted Certificates view is loaded.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66521
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Novee
More from Foxit Software Inc.
View All →Affected Vendor
Foxit Software Inc.
View all reports →