CVE-2021-22122
An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - psirt@fortinet.com
- Published
- 2021-02-08
- Last modified
- 2024-10-25
- Weaknesses
- CWE-79
Affected products
References
- https://fortiguard.com/advisory/FG-IR-20-122
