Stored Cross-Site Scripting Vulnerability in Foxit PDF Editor Cloud

CVE-2026-1592

What is CVE-2026-1592?

Foxit PDF Editor Cloud (pdfonline) has a serious vulnerability related to stored cross-site scripting within its Create New Layer feature. The vulnerability arises from unsanitized user input being embedded in the HTML output, which could lead to the execution of arbitrary JavaScript when the affected layer is accessed. This poses significant security risks, as attackers can manipulate the content and execute malicious scripts, potentially compromising user data and system integrity. It is crucial for users to apply available updates and follow security best practices to safeguard against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References