CVE-2017-7335

CVE-2017-7335 concerns a Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC (versions 6.1-2/6.1-4/6.1-5; 7.0-7/7.0-8/7.0-9/7.0-10; 8.0/8.1/8.2/8.3.0-8.3.2). The issue arises from non-sanitized HTTP POST parameters refresh and branchtotable, allowing an authenticated user to inject arbi...