CVE-2024-35280

https://notcve.org/view.php?id=CVE-2024-35280

15 Jan 2025 — A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiDeceptor 3.x all versions, 4.x all versions, 5.0 all versions, 5.1 all versions, version 5.2.0, and version 5.3.0 may allow an attacker to perform a reflected cross-site scripting attack in the recovery endpoints Una neutralización incorrecta de la entrada durante la generación de páginas web ("cross-site scripting") en Fortinet FortiDeceptor 3.x todas las versiones, 4.x todas las versiones, 5.0 todas las... • https://fortiguard.fortinet.com/psirt/FG-IR-24-010 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •