Firefox is susceptible to cross domain scripting attacks via iframes.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43098/firefoxCross.txt
Source: https://packetstormsecurity.com/files/43098/firefoxCross.txt.html