Vulnerability CVE-2022-23438


Published: 2022-07-18

Description:
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in FortiOS version 7.0.5 and prior and 6.4.9 and prior may allow an unauthenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the captive portal authentication replacement page.

 References:
https://fortiguard.com/psirt/FG-IR-21-057

Copyright 2026, cxsecurity.com

 

Back to Top