CVE-2023-26211 Information

Description

An improper neutralization of input during web page generation (‘cross-site scripting’) in Fortinet FortiSOAR 7.3.0 through 7.3.2 allows an authenticated remote attacker to inject arbitrary web script or HTML via the Communications module.

Reference

https://fortiguard.com/psirt/FG-IR-23-088