CVE-2023-6210: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure http: URLs This vulnerability affects Firefox < 120.

Affected products

• Mozilla Firefox: before 120.0 (fixed in 120.0)

Published 2023-11-21. Last modified 2026-06-17.