CVE-2021-27517

Foxit PDF SDK For Web through 7.5.0 allows XSS

published July 20, 2021

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert (in the Acrobat JavaScript API).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Published
2021-07-20T11:38Z
EPSS history
Timeline
  • 20 JUL 11:38Z
    Foxit PDF SDK For Web through 7.5.0 allows XSS
    cvelistv5