https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:35:31.254612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-66519 CVE-2025-66519 — Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality 2026-10-12T19:35:31.269322+00:00

Affected: Foxit Software Inc. pdfonline.foxit.com

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Layer Import functionality. A crafted payload can be injected into the “Create new Layer” field during layer import and is later rendered into the DOM without proper sanitization. As a result, the injected script executes when the Layers panel is accessed.