CVE-2024-52967

Fortinet / FortiPortal PUBLISHED

Description (CNA)

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiPortal	affected 6.0.0 through 6.0.14

CWE

CWE-80

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-211

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.