Skip to content
OpenAdvisories

Product · Foxit Software

webplugins.foxit.com

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-66500

    Foxit webplugins.foxit.com Stored Cross-Site Scripting via postMessage Vulnerability

    A stored cross-site scripting (XSS) vulnerability exists in webplugins.foxit.com. A postMessage handler fails to validate the message origin and directly assigns externalPath to a script source, allowing an attacker to execute arbitrary JavaScript when a craf…

    Foxit Software webplugins.foxit.com