CVE-2025-55032

Mozilla Focus for iOS versions prior to 142 are vulnerable to a Cross-Site Scripting (XSS) vulnerability due to the improper handling of the Content-Disposition header. When the browser fails to respect a header of type Attachment , it incorrectly displays the content inline. An attacker could ex...