CVE-2020-12816

FortiNAC prior to 8.7.2 is affected by an improper neutralization of input vulnerability that enables a stored XSS via the UserID of Admin Users. The issue requires authentication and is exploitable remotely to execute script code in the context of an admin user’s session. The root cause is impro...