← Database

CVE-2021-38574

CRITICAL CVSS: 9.8 Published: 2021-08-11 Modified: 2026-06-17

Description

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows SQL Injection via crafted data at the end of a string.

Affected Platforms

Foxitsoftware PhantompdfFoxitsoftware Foxit Reader

Weakness Type

CWE-89

References