CVE-2024-26284

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 123

Description This issue allows an attacker to conduct a Universal Cross-Site Scripting (UXSS) attack on a victim website using a 302 redirect, provided the victim has a link to the attacker's website.

Recommendations For Focus for iOS versions prior to 123, update to version 123 or later to resolve the issue. As a temporary workaround, consider restricting links to untrusted websites to minimize the risk of exploitation.