Foxit Workspace Stored XSS in shared artifacts

Summary

A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.

Remediation

1. Inventory every Foxit Software Inc. Foxit Workspace deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.foxit.com/support/security-bulletins.html