CVE-2021-32585

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests...

CVE-2021-32585

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests...

CVE-2021-32585

Fortinet FortiWAN (pre-4.5.9) is affected by CVE-2021-32585, a stored cross-site scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The issue resides in the log viewer/web interface and can be triggered by specially crafted HTTP requests, allowing an...