CVE-2024-22397

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code...

CVE-2024-22397

A Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicOS SSLVPN portal due to improper neutralization of input during web page generation. This flaw allows a remote authenticated attacker with firewall 'admin' privileges to store and execute arbitrary JavaScript code. The vulnerabi...