CVE-2025-66502

MEDIUM

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into...

Affects 1 product across 1 vendor.

CVSS 3.15.4
EPSS0.2%
Percentile7th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, requires user interaction, can impact systems beyond the vulnerable component, no availability impact.
CWE Weakness Definitions
CWE-79: Cross-Site Scripting (XSS)

Attacker injects malicious scripts into web pages viewed by other users, executing in the victim's browser context.

Related Attack Patterns (CAPEC)
CAPEC-85 AJAX Footprinting
via CWE-79
CAPEC-209 XSS Using MIME Type Mismatch
via CWE-79
CAPEC-588 DOM-Based XSS
via CWE-79
CAPEC-591 Reflected XSS
via CWE-79
CAPEC-592 Stored XSS
via CWE-79
Show all 6
via CWE-79

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A stored cross-site scripting (XSS) vulnerability exists in the Page Templates feature of pdfonline.foxit.com, allowing a crafted payload to be stored and executed each time the affected PDF is loaded.

BSID: BS-2025-GLOBAL-028861-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-66502?
A stored cross-site scripting (XSS) vulnerability exists in the Page Templates feature of pdfonline.foxit.com, allowing a crafted payload to be stored and executed each time the affected PDF is loaded.
What is the CVSS score for CVE-2025-66502?
CVE-2025-66502 has CVSS 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. EPSS: 0.2%.
Is CVE-2025-66502 actively exploited?
No confirmed active exploitation of CVE-2025-66502 as of 2026-05-30.
How do I remediate CVE-2025-66502?
Priority: MEDIUM. Advisory: https://www.foxit.com/support/security-bulletins.html PSIRT: 14984358-7092-470d-8f34-ade47a7658a2
What systems are affected by CVE-2025-66502?
CVE-2025-66502 affects Foxit Pdf Editor Cloud.
Vulnerability Details
CVE IDCVE-2025-66502
BSIDBS-2025-GLOBAL-028861-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Published2025-12-19
Last Modified2025-12-23
ICS Relevance0%
Weakness (CWE)
Cross-Site Scripting (XSS)
SourceNVD
Official Description

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected PDF is loaded.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can inject a malicious script as the template name in the Page Templates feature. This script is then stored and executed in the user's browser when the PDF is loaded, potentially leading to unauthorized actions or data theft.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Foxit Pdf Editor Cloud < 2025-12-01
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: 14984358-7092-470d-8f34-ade47a7658a2
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 301 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash1587a0f45fd2886c8b06d92581c0bb0a763d4e810ab592c84624e489fe537f4b26da5e4c606ace9c64964688e5bd9c8f75d46c3c6b249e8a35b2df8166ef1184
Related CVEs affecting Foxit
CVE-2009-0837 10.0 Stack-based buffer overflow in Foxit Reader 3.0 before Build 1506, including ... CVE-2022-24955 9.8 Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Unc... CVE-2022-24954 9.8 Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stac... CVE-2021-38563 9.8 An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor befo... CVE-2022-28104 9.8 Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload v...
View all Foxit CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →