CVE-2025-61886 — Fortinet / FortiSandbox PaaS

CVE-2025-61886

Fortinet / FortiSandbox PaaS PUBLISHED

Description (CNA)

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox PaaS 5.0.0 through 5.0.4 may allow an attacker to perform an XSS attack via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSandbox PaaS	affected 5.0.0 through 5.0.4
Fortinet / FortiSandbox	affected 5.0.0 through 5.0.4

CWE

CWE-79

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-109

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.