VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Dec 19, 2025· Updated Jun 17, 2026

CVE-2025-66522

CVE-2025-66522

Description

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affected PDF is loaded.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Foxitsoftware/PDF Editor Cloud2 versions
    cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:foxit:pdf_editor_cloud:*:*:*:*:*:*:*:*range: <=2025-12-01
    • (no CPE)
  • Foxit Software Inc./pdfonline.foxit.comv5
    Range: before 2025‑12‑01

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.