CVE-2026-119432
Foxit Workspace Stored XSS in shared artifacts
CVSS Score
8.7
EPSS Score
0.0%
EPSS Percentile
0th
A stored cross-site scripting (XSS) vulnerability exists in the Foxit Workspace's file share preview functionality. An attacker could upload a crafted file and share it with a victim. When the victim opens or previews the file, the embedded script executes in the application's origin, potentially accessing locally stored credentials and enabling credential theft.
| CWE | CWE-79 |
| Vendor | foxit software inc. |
| Product | foxit workspace |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for foxit software inc. foxit workspace
Be the first to know when new high vulnerabilities affecting foxit software inc. foxit workspace are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
Foxit Software Inc. / Foxit Workspace
before 2026-11-6
References
Credits
mrfathoni