Low severity3.5NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026
CVE-2024-52967
CVE-2024-52967
Description
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:fortinet:fortiportal:*:*:*:*:*:*:*:*range: >=6.0.0,<6.0.15
- (no CPE)range: 6.0.0 - 6.0.14
- (no CPE)range: 6.0.0
Patches
Vulnerability mechanics
References
1- fortiguard.fortinet.com/psirt/FG-IR-24-211nvdVendor Advisory
News mentions
0No linked articles in our index yet.