FortiMail reflected XSS vulnerability under customized webmail login page

There exists a reflected cross-site scripting (XSS) vulnerability on FortiMail customized pre-authentication webmail login page, allowing successful attackers to run arbitrary javascript code in the security context of their victim’s browser.