medium6.8
CVE-2023-26211
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remo…
Impact
An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated, remote attacker to inject arbitrary web script or HTML via the Communications module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisoar | from 6.4.0 before 7.3.3 Version 7.4.0 |