A cross-site scripting (XSS) vulnerability was addressed in iOS 18.4 and iPadOS 18.4 through improved input sanitization. The vulnerability could be triggered by processing a maliciously crafted file, potentially leading to limited confidentiality and integrity impacts. The issue has a medium severity rating and requires user interaction for exploitation.