CVE-2022-22755

HIGH

Firefox < 97 - XSS

Title source: llm

Description

By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab was closed. This vulnerability affects Firefox < 97.

References (2)

Scores

CVSS v3 8.8
EPSS 0.0076
EPSS Percentile 73.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-672
Status published

Affected Products (1)

mozilla/firefox < 97.0

Timeline

Published Dec 22, 2022
Tracked Since Feb 18, 2026