Stored Cross-Site Scripting Vulnerability in Foxit Workspace

CVE-2026-119432

What is CVE-2026-119432?

A stored cross-site scripting vulnerability has been identified in the file share preview feature of Foxit Workspace. This issue arises when an attacker uploads a specially crafted file and shares it with a user. Upon opening or previewing this file, malicious scripts can execute within the context of the application, potentially compromising sensitive information such as locally stored credentials. This vulnerability highlights the importance of stringent security practices and user awareness in preventing unauthorized access and data leaks.

References