CVE-2025-51966

MEDIO 6.1CVE-2025-51966 · Published 02/09/2025 · updated 07/11/2026

In breve

CVE-2025-51966 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda utools (u-tools).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.25%, superiore al 16.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
utools u-tools	`≤ 7.1.1`	No fix yet

Description

A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user previews a specially crafted PDF file, embedded JavaScript code executes within the application's privileged context, potentially allowing attackers to steal sensitive data or perform unauthorized actions.

References

t1sts.github.io/2025/05/27/uTools-has-an-XSS-vulnerability · Exploit
t1sts.github.io/2025/09/01/CVE-2025-51966 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free