CVE-2016-3196

CVE-2016-3196 is a stored XSS in Fortinet FortiAnalyzer and FortiManager where remote authenticated users can inject HTML/JS via an image filename uploaded in reports. Affected: FortiAnalyzer 5.x before 5.0.12 and 5.x in 5.2.x before 5.2.6; FortiManager 5.x before 5.0.12 and 5.x in 5.2.x before 5...