FortiNAC - Multiple Stored and Reflected XSS

2023-02-1600:00:00

FortiGuard Labs

www.fortiguard.com

fortinac

stored xss

reflected xss

cwe-79

input neutralization

web page generation

authenticated attacker

http get requests

EPSS

0.001

Percentile

22.6%

JSON

Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC may allow an authenticated attacker to perform several XSS attacks via crafted HTTP GET requests.

EPSS

0.001

Percentile

22.6%

JSON

Related for FG-IR-22-260