CVE-2025-55032

Mozilla Focus for iOS versions prior to 142 are vulnerable to a cross-site scripting (XSS) flaw caused by the improper handling of the Content-Disposition header. Specifically, the browser fails to respect headers of type Attachment , causing it to incorrectly display the content inline. An attac...