Skip to content
OpenAdvisories
Unscored Public exploit CVE-2021-43530 EUVD-2021-30459GHSA-mgfp-hcp6-39f4

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a …

Published Dec 8, 2021 · Updated Aug 4, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Category: Browsers

Description

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 94 94

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • hfh86/CVE-2021-43530-UXSS-On-QRcode-Reader- ★ 2 · Mar 22, 2022

    CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for A…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References