description: A rogue webpage could override the injected WKUserScript used by the logins autofill, this exploit could result in leaking a password for the current domain. This vulnerability affects Firefox for iOS < 28.
problem types: Login JS user script can be overidden
affected:
{
product: Firefox for iOS
vendor: Mozilla
versions:
lessThan: 28, status: affected, version: unspecified, versionType: custom
}