GHSA-p52c-9f7h-pxpj
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
An attacker could execute unauthorized script on a legitimate site through UXSS using window.open() by opening a javascript URI leading to unauthorized actions within the user's loaded webpage. This vulnerability affects Focus for iOS < 122.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 22, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.