A vulnerability described as critical has been identified in Mozilla Focus and Klar up to 151.3.0 on iOS. Affected is an unknown function. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-11799. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.