CVE-2021-29953

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88.0.1 Firefox for Android versions prior to 88.1.3

Description A malicious webpage could force a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting issue. This issue only affects Firefox for Android, with other operating systems being unaffected. The vulnerability can be exploited by a remote attacker using a specially crafted link, allowing for a cross-site scripting (XSS) attack.

Recommendations For Firefox versions prior to 88.0.1, update to version 88.0.1 or later. For Firefox for Android versions prior to 88.1.3, update to version 88.1.3 or later.