Description
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiSOAR | 7.3.0 – ≤ 7.3.2, 7.2.0 – ≤ 7.2.2, 7.0.0 – ≤ 7.0.3, 6.4.3 – ≤ 6.4.4, 6.4.0 – ≤ 6.4.1 | — |