VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 17, 2025· Updated Jun 17, 2026

CVE-2021-26087

CVE-2021-26087

Description

An improper neutralization of input during web page generation in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 web interface may allow both authenticated remote attackers and non-authenticated attackers in the same network as the appliance to perform a stored cross site scripting attack (XSS) via injecting malicious payloads in different locations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Fortinet/Fortiwlc4 versions
    cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:fortinet:fortiwlc:*:*:*:*:*:*:*:*range: >=8.4.0,<=8.4.2
    • cpe:2.3:a:fortinet:fortiwlc:8.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiwlc:8.6.0:*:*:*:*:*:*:*
    • (no CPE)range: <=8.5.3, <=8.4.8, <=8.3.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.