description: Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.
problem types: Character encoding XSS vulnerability
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 68, status: affected, version: unspecified, versionType: custom
}