CVE-2025-6725 – Cross-Site Scripting (XSS) in PdfViewer

https://notcve.org/view.php?id=CVE-2025-6725

02 Jul 2025 — In the PdfViewer component, a Cross-Site Scripting (XSS) vulnerability is possible if a specially-crafted document has already been loaded and the user engages with a tool that requires the DOM to be re-rendered. • https://www.telerik.com/blazor-ui/documentation/knowledge-base/pdfviewer-xss-vulnerability-cve-2025-6725 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •