CVE-2021-27517
Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded Java…
Published: 2021-07-20 · CVSS: Unscored
Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert (in the Acrobat JavaScript API).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7