CVE-2024-52967CWE-80

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute…

Low · published January 14, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.6th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-01-14T14:09Z
EPSS history
Timeline
  • 14 JAN 14:09Z
    An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute…
    cvelistv5