description: An improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0 may allow an unauthenticated user to perform a cross-site scripting attack (XSS) via a parameter of the logon page.
problem types: Execute unauthorized code or commands
affected:
{
product: FortiAuthenticator WEB UI
vendor: Fortinet
versions:
status: affected, version: 6.0.0
}