low2.7
CVE-2025-22855
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow t…
Impact
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlientems | from 7.2.1 through 7.2.10 from 7.4.0 before 7.4.3 |