Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-51966 1 U-tools 1 Utools 2025-09-05 6.1 Medium
A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user previews a specially crafted PDF file, embedded JavaScript code executes within the application's privileged context, potentially allowing attackers to steal sensitive data or perform unauthorized actions.