Medium severity · published Dec 19, 2025
CVE-2025-66522
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Digital IDs Common Name Field
5.4
CVSS
0.2%
EPSS
No
On KEV
Description
A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affected PDF is loaded.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PD
pdfonline.foxit.com · Foxit Software Inc.
before 2025‑12‑01 · source: vendor
PE
Pdf Editor Cloud · Foxit
through 2025-12-01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-66522
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-66522
Vendor Advisory
https://www.foxit.com/support/security-bulletins.html
More from pdfonline.foxit.com
5.4
CVE-2026-1592
Stored XSS via Create New Layer Field found in Foxit PDF Editor Cloud
5.4
CVE-2026-1591
Stored XSS via Attachments Feature in https://pdfonline.foxit.com/
5.4
CVE-2025-66521
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Trusted Certificates Feature
5.4
CVE-2025-66520
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Portfolio SVG Handling
5.4
CVE-2025-66519
Foxit pdfonline.foxit.com Stored Cross-Site Scripting in Layer Import Functionality