> HTML injection in WebUI

[SOURCE] Fortinet FortiGuard [DATE: 13/10/2026 07:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 4.9

 An improper neutralization of script-related HTML tags in a web page in FortiManager and FortiAnalyzer may allow an attacker to perform a cross site scripting (XSS) attack via the Identify Provider name field.

  Revised on 2026-10-13 00:00:00

[messages.read_original_source] →