CVE-2026-103418: CVE-2026-103418: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1.

Özet bilgiler

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

%0,30 (yüzdelik 23)

CWE

CWE-79

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• bugzilla.mozilla.org
• www.mozilla.org
• CWE-79