description: An improper neutralization of input vulnerability in FortiWeb allows a remote authenticated attacker to perform a stored cross site scripting attack (XSS) via the Disclaimer Description of a Replacement Message.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiWeb
vendor: n/a
versions:
status: affected, version: FortiWeb 6.2.2
}