CVE-2022-22755
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) e…
Published: 2022-12-22 · CVSS: 8.8 · CVSS 3.1
By using XSL Transforms, a malicious webserver could have served a user an XSL document that would continue to execute JavaScript (within the bounds of the same-origin policy) even after the tab was closed. This vulnerability affects Firefox < 97.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7