description: A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauthorized code or commands via 'Comments' while saving Config Revisions.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiOS
vendor: Fortinet, Inc.
versions:
status: affected, version: FortiOS versions 5.4.0 through 5.4.4
}