CVE-2020-26958: XSS

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1669355
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-51/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/
• https://www.mozilla.org/security/advisories/mfsa2020-50/
• https://www.mozilla.org/security/advisories/mfsa2020-51/
• https://www.mozilla.org/security/advisories/mfsa2020-52/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-52
• MFSA2020-50
• MFSA2020-51

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-26951
• CVE-2020-16012
• CVE-2020-26953
• CVE-2020-26956
• CVE-2020-26958
• CVE-2020-26959
• CVE-2020-26960
• CVE-2020-15999
• CVE-2020-26961
• CVE-2020-26965
• CVE-2020-26966
• CVE-2020-26968
• CVE-2020-26952
• CVE-2020-26954
• CVE-2020-26955
• CVE-2020-26957
• CVE-2020-26962
• CVE-2020-26963
• CVE-2020-26964
• CVE-2020-26967
• CVE-2020-26969

Frequently Asked Questions

• What is the vulnerability ID of this issue?

  The vulnerability ID of this issue is CVE-2020-26958.

• What is the severity of CVE-2020-26958?

  The severity of CVE-2020-26958 is medium (4 on a scale of 1-10).

• Which software is affected by CVE-2020-26958?

  The software affected by CVE-2020-26958 includes Mozilla Firefox ESR version up to 78.5, Mozilla Firefox version up to 83, and Mozilla Thunderbird up to version 78.5.

• What is the possible impact of CVE-2020-26958?

  CVE-2020-26958 could lead to a cross-site script inclusion vulnerability or a Content Security Policy bypass.

• How can I fix CVE-2020-26958?

  To fix CVE-2020-26958, update Mozilla Firefox ESR to version 78.5 or later, update Mozilla Firefox to version 83 or later, and update Mozilla Thunderbird to version 78.5 or later.