CVE-2026-1592: Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-03 · updated 2026-06-17
Weakness: CWE-79

Description

Foxit PDF Editor Cloud (pdfonline) contains a stored cross-site scripting vulnerability in the Create New Layer feature. Unsanitized user input is embedded into the HTML output, allowing arbitrary JavaScript execution when the layer is referenced. This issue affects pdfonline.foxit.com: before 2026‑02‑03.

Affected products

Foxit Pdf Editor Cloud: before 2026-02-03 — fixed in 2026-02-03

How to fix

Upgrade to a fixed version: Foxit Pdf Editor Cloud 2026-02-03. Check the vendor advisory for mitigations.

References

https://www.foxit.com/support/security-bulletins.html

Get alerted when CVE-2026-1592 or the next vulnerability affects your stack