CVE-2021-43530: Mozilla Firefox

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94.

Affected products

• Mozilla Firefox: before 94.0 (fixed in 94.0)

Published 2021-12-08. Last modified 2026-06-17.