| Package | Affected versions | Patched versions |
|---|---|---|
| esign | < 2026-01-16 | 2026-01-16 |
URL parameters are directly embedded into JavaScript code or HTML attributes without proper encoding or sanitization. This allows attackers to inject arbitrary scripts when an authenticated user visits a crafted link. This issue affects na1.foxitesign.foxit.com: before 2026‑01‑16.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free