Medium · 6.1 CVE-2023-5758 EUVD-2023-58043GHSA-fpp8-6gxj-v3pg

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scri…

Published Oct 24, 2023 · Updated Jun 12, 2025 · Assigned by mozilla

Vendor: Mozilla Product: Firefox for iOS Platform: iOS Category: Browsers

Description

When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site Scripting (XSS) attack. This vulnerability affects Firefox for iOS < 119.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox for iOS	unspecified – < 119	119

Advisories 1

WID-SEC-2023-2743 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2024

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1850019
https://www.mozilla.org/security/advisories/mfsa2023-48/
https://security.gentoo.org/glsa/202401-10