CVE-2022-23438

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remote attacker to perform a reflected cross site scripting XSS attack in the captive portal authenticatio...

CVE-2022-23438

CVE-2022-23438 is a reflected cross-site scripting (XSS) vulnerability in FortiOS, arising from improper input neutralization during web page generation. Affected are FortiOS 7.0.x up to 7.0.5 and 6.4.x up to 6.4.9; the issue enables an unauthenticated, remote attacker to trigger XSS in the capti...