description: A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiOS
vendor: Fortinet, Inc.
versions:
status: affected, version: FortiOS versions 5.6.0 and earlier
}