description: A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthorized code or commands via an improperly sanitized POST parameter in the FortiWeb Site Publisher feature.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiWeb
vendor: Fortinet, Inc.
versions:
status: affected, version: FortiWeb versions 5.7.1 and below
}