Skip to content

Known vulnerabilities in Mozilla Web Push

Is your version affected?

CVE Summary Score Published
CVE-2025-23720 Cross-Site Request Forgery (CSRF) vulnerability in Marco Castelluccio Web Push web-push allows Stored XSS.This issue… 7.1 High Jan 16, 2025

Other Mozilla products