Back Cyberpress

Foxit PDF Editor Vulnerability Allows Attackers to Execute Arbitrary JavaScript

Cyberpress • February 3, 2026

... privilege escalation and cross-domain data theft within eSign workflows. Foxit's response included implementing comprehensive input validation and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Foxit PDF Editor Vulnerabilities Enable Arbitrary JavaScript Execution Critical cross-site scripting (XSS) vulnerabilities were identified in Foxit PDF Editor Cloud, allowing attackers to execute arbitrary JavaScript code in users’ browsers. The vulnerabilities stem from insufficient input validation and improper output encoding in the application's File Attachments list and Layers panel, potentially leading to privilege escalation and cross-domain data theft. Foxit has responded by implementing comprehensive input validation. 4 sources 30

Extracted Entities

Foxit PDF Editor Vulnerability Allows Attackers to Execute Arbitrary JavaScript

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)