| Package | Affected versions | Patched versions |
|---|---|---|
| forticlientems | ≥ 7.2.1, ≤ 7.2.10≥ 7.4.0, < 7.4.3 | 7.4.3 |
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free