| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 102.0 | 102.0 |
| firefox esr | < 91.11 | 91.11 |
| thunderbird | < 91.11 | 91.11 |
An iframe that was not permitted to run scripts could do so if the user clicked on a <code>javascript:</code> link. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free