| Package | Affected versions | Patched versions |
|---|---|---|
| firefox focus | < 148.2 | 148.2 |
Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for iOS 148.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free