description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
defaultStatus: unknown
platforms: Gen7
product: SonicOS
vendor: SonicWall
versions:
status: affected, version: 7.0.1-5145 and earlier versions
status: affected, version: 7.1.1-7047 and earlier versions
}