Vulnerability CVE-2022-22755
Published: 2022-12-22

Description:
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab was closed. This vulnerability affects Firefox < 97.

 References:
https://bugzilla.mozilla.org/show_bug.cgi?id=1309630
https://www.mozilla.org/security/advisories/mfsa2022-04/
Copyright 2026, cxsecurity.com

 

Back to Top