CVE-2021-41029

Publication date

2021-12-08 11:29:46

Family

fortinet

State

PUBLISHED

Description

A improper neutralization of input during web page generation (cross-site scripting) in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests