Medium · 6.1 CVE-2025-55033 EUVD-2025-25222GHSA-f484-2jqj-73ch

Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

Published Aug 19, 2025 · Updated Apr 13, 2026 · Assigned by mozilla

Vendor: Mozilla Product: Focus for iOS Platform: iOS

Description

Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Focus for iOS	—	142

Advisories 1

WID-SEC-2025-1866 Mozilla Firefox und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 15, 2026

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1913825
https://www.mozilla.org/security/advisories/mfsa2025-69/