CVEvulnerability
CVE-2025-55033
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-08-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Affected configurations
• mozilla firefox focus (< 142.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1913825 Issue Tracking, Permissions Required
- https://www.mozilla.org/security/advisories/mfsa2025-69/ Vendor Advisory