A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11. CREATE(Triage):(User=admin) CVE-2025-5267 (https://nvd.nist.gov/vuln/detail/CVE-2025-5267)