Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9. CREATE(Triage):(User=admin) CVE-2024-2610 (https://nvd.nist.gov/vuln/detail/CVE-2024-2610)
