CVE-2022-38376 Information

Description

Multiple improper neutralization of input during web page generation (‘Cross-site Scripting’) vulnerabilities [CWE-79] in Fortinet FortiNAC portal UI before 9.4.1 allows an attacker to perform an XSS attack via crafted HTTP requests.

Reference

https://fortiguard.com/psirt/FG-IR-22-273