CVE-2025-55033
published 2025-08-19CVE-2025-55033: Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability…
PriorityP424medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.15%
5.1th percentile
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox | — | — |
| mozilla | firefox_focus | < 142.0 | 142.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Mozilla
Mozilla Foundation Security Advisory 2025-69: CVE-2025-55033
vendor_mozilla·CVSS 6.1
CVE-2025-55033 [MEDIUM] Mozilla Foundation Security Advisory 2025-69: CVE-2025-55033
Mozilla Foundation Security Advisory 2025-69
CVE: CVE-2025-55033
Product: Focus for iOS
Impact: moderate
Fixed in: Focus for iOS 142
GHSA
GHSA-f484-2jqj-73ch: Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks This vulner
ghsa_unreviewed·2025-08-19
CVE-2025-55033 [MEDIUM] CWE-79 GHSA-f484-2jqj-73ch: Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks This vulner
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks This vulnerability affects Focus for iOS < 142.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-08-19
Published