description: A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute unauthorized code or commands via the applicationSearch parameter in the FortiView functionality.
problem types: Cross-Site Scripting
affected:
{
product: Fortinet FortiPortal
vendor: Fortinet
versions:
status: affected, version: 4.0.0 and below
}