CVE-2024-31488 Information

Description

An improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC version 9.4.0 through 9.4.4 9.2.0 through 9.2.8 9.1.0 through 9.1.10 8.8.0 through 8.8.11 8.7.0 through 8.7.6 7.2.0 through 7.2.3 may allow a remote authenticated attacker to perform stored and reflected cross site scripting (XSS) attack via crafted HTTP requests.

Reference

https://fortiguard.com/psirt/FG-IR-24-040