CVE-2022-35851

https://notcve.org/view.php?id=CVE-2022-35851

02 Nov 2022 — An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiADC management interface 7.1.0 may allow a remote and authenticated attacker to trigger a stored cross site scripting (XSS) attack via configuring a specially crafted IP Address. Una neutralización inadecuada de la entrada durante la vulnerabilidad de generación de páginas web [CWE-79] en la interfaz de administración FortiADC 7.1.0 puede permitir que un atacante remoto y autenticado desencadene un ataque de cross ... • https://fortiguard.com/psirt/FG-IR-22-314 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •