An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated attacker to perform a Cross Site Scripting attack (XSS).
[
{
"product": "Fortinet FortiWeb",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "6.0.5"
},
{
"status": "affected",
"version": "6.2.0"
},
{
"status": "affected",
"version": "6.1.1"
}
]
}
]