Skip to content
OpenAdvisories
High · 8.7 CVE-2026-119432 EUVD-2026-117888GHSA-vj2g-cm34-5hhv

Foxit Workspace Stored XSS in shared artifacts

Published Nov 6, 2026 · Updated Nov 10, 2026 · Assigned by Foxit

Description

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.

Affected products

VendorProductAffectedFixed
Foxit Software Foxit Workspace before 2026-11-6 —

References