Mozilla Focus for iOS JavaScript Link Drag-and-Drop Vulnerability Allowing XSS Execution
Vulnerability
A vulnerability exists in Mozilla Focus for iOS versions prior to 142, where dragging JavaScript links to the URL bar could execute malicious scripts. This behavior could be exploited to perform cross-site scripting (XSS) attacks.
Impact
Exploitation of this vulnerability could lead to cross-site scripting (XSS) attacks.
Remediation
Users can update to Mozilla Focus for iOS version 142 to address this vulnerability.
Added: Aug 19, 2025, 9:31 PM
Updated: Aug 19, 2025, 9:31 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.