> XSS via back button

[SOURCE] Fortinet FortiGuard [DATE: 10/02/2026 08:00] [LANGUAGE: EN]

 
  CVSSv3 Score:
 
 7.9

 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiSandbox may allow an unauthenticated attacker to execute commands via crafted requests.FortiSandbox PaaS versions 4.4.8 and 5.0.5 contains the fix for this vulnerability.

  Revised on 2026-02-10 00:00:00

[messages.read_original_source] →