Cross site scripting

A reflected Cross-site Scripting XSS vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously craft...

CVE-2017-7739

A reflected Cross-site Scripting XSS vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5.2.0 to 5.2.11 allows an unauthenticated attacker to inject arbitrary web script or HTML in the context of the victim's browser via sending a maliciously craft...

PT-2017-3710

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.2.0 through 5.2.11 FortiOS versions 5.4.0 through 5.4.5 FortiOS version 5.6.0 Description: The issue is caused by insufficient protection of the web page structure, allowing a remote attacker to inject arbitrary JavaScript ...