Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:56:08 +0000 CVE-2026-1591 — Stored XSS via Attachments Feature in https://pdfonline.foxit.com/ https://cve.radiocsirt.org/vuln/cve-2026-1591 <p><strong>Affected:</strong> Foxit Software Inc. pdfonline.foxit.com</p> <p>Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed.</p> <p>This issue affects pdfonline.foxit.com: before 2026‑02‑03.</p> <p><strong>Affected:</strong> Foxit Software Inc. pdfonline.foxit.com</p> <p>Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the file upload feature. A malicious username is embedded into the upload file list without proper escaping, allowing arbitrary JavaScript execution when the list is displayed.</p> <p>This issue affects pdfonline.foxit.com: before 2026‑02‑03.</p> https://cve.radiocsirt.org/vuln/cve-2026-1591