Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 20:35:03 +0000 cnvd-2026-03169 https://cve.radiocsirt.org/vuln/cnvd-2026-03169 cnvd-2026-03169 https://cve.radiocsirt.org/vuln/cnvd-2026-03169 EUVD-2026-264172 https://cve.radiocsirt.org/vuln/euvd-2026-264172 EUVD-2026-264172 https://cve.radiocsirt.org/vuln/euvd-2026-264172 fkie_cve-2025-66501 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66501 <p>A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payload can be stored via the Identity “First Name” field, which is later rendered into the DOM without proper sanitization. As a result, the injected script may execute when predefined text is used or when viewing document properties.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payload can be stored via the Identity “First Name” field, which is later rendered into the DOM without proper sanitization. As a result, the injected script may execute when predefined text is used or when viewing document properties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-66501 GHSA-wwrp-v67c-phr5 https://cve.radiocsirt.org/vuln/ghsa-wwrp-v67c-phr5 <p>A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payload can be stored via the Identity “First Name” field, which is later rendered into the DOM without proper sanitization. As a result, the injected script may execute when predefined text is used or when viewing document properties.</p> <p>A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Predefined Text feature of the Foxit eSign section. A crafted payload can be stored via the Identity “First Name” field, which is later rendered into the DOM without proper sanitization. As a result, the injected script may execute when predefined text is used or when viewing document properties.</p> https://cve.radiocsirt.org/vuln/ghsa-wwrp-v67c-phr5