6.1
Medium
CVE-2024-26284 Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim…
Description
Utilizing a 302 redirect, an attacker could have conducted a Universal Cross-Site Scripting (UXSS) on a victim website, if the victim had a link to the attacker's website. This vulnerability affects Focus for iOS < 123.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Focus for iOS 123 | earliest → < 123 | 123 |
References
- bugzilla.mozilla.org bugzilla.mozilla.org
- www.mozilla.org www.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Focus for iOS
The 13 CVEs of Focus for iOS →
CVE-2026-11799
UXSS in Focus for iOS / Klar Webkit navigation
7.5
High
CVE-2026-2919
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a…
4.3
Medium
CVE-2025-10290
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh…
6.5
Medium
CVE-2025-55033
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially…
6.1
Medium