Cross-Site Scripting (XSS) Vulnerability in Fortinet FortiWLM Version 8.6.1 and Below

CVE-2021-42752 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to execute malicious javascript code on victim's host via crafted HTTP requests

Learn more about our Cis Benchmark Audit For Fortinet.