Description
Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.2.x before 5.2.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) user group or (2) vpn template menus.
References
- 1032261 vdb-entry
- http://www.fortiguard.com/advisory/FG-IR-15-005/
- 1032265 vdb-entry
- 1032264 vdb-entry
- 1032262 vdb-entry