Lucene search
FortiGuard LabsFG-IR-21-114HistoryDec 07, 2021 - 12:00 a.m.
FortiWLM - stored cross-site scripting in hotspot profile controller
2021-12-0700:00:00
FortiGuard Labs
www.fortiguard.com
6
fortiwlm
stored cross-site scripting
hotspot profile controller
cwe-79
authenticated attacker
malicious payloads
web page generation
client attack
EPSS
0.001
Percentile
29.4%
An improper neutralization of input during web page generation vulnerability (‘Cross-site Scripting’) [CWE-79] in FortiWLM may allow an authenticated attacker to perform a stored cross site scripting attack (XSS) via storing malicious payloads and trigger the attack on victim’s client via various endpoints.
Related
cve
cve
CVE-2021-41029
2021-12-08 12:15:07
prion
prion
Cross site scripting
2021-12-08 12:15:00
cvelist
cvelist
CVE-2021-41029
2021-12-08 11:29:46
nvd
nvd
CVE-2021-41029
2021-12-08 12:15:07