description: JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is supplied by WebRTC usage and is not under third-party control, making this difficult to exploit, but the vulnerability could possibly be used for a cross-site scripting (XSS) attack. This vulnerability affects Firefox < 55.
problem types: Self-XSS XUL injection in about:webrtc
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 55, status: affected, version: unspecified, versionType: custom
}