CVE-2025-55033

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...

CVE-2025-55033

Mozilla Focus for iOS versions prior to 142 are vulnerable to a Cross-Site Scripting (XSS) vulnerability. The flaw occurs when a user drags JavaScript links to the URL bar, which can be exploited by an attacker to execute arbitrary web scripts or HTML via a crafted payload. This vulnerability was...

CVE-2025-55033 Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...