description: When a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be processed and executed. This allows for users to be socially engineered to execute an XSS attack on themselves. This vulnerability affects Firefox < 53.
problem types: Drag and drop of javascript: URLs can allow for self-XSS
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 53, status: affected, version: unspecified, versionType: custom
}