Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.
[
{
"vendor": "Mozilla",
"product": "Firefox for iOS",
"versions": [
{
"version": "unspecified",
"lessThanOrEqual": "25",
"status": "unknown",
"versionType": "custom"
},
{
"version": "next of 25",
"status": "unaffected",
"lessThan": "unspecified",
"versionType": "custom"
}
]
}
]