CVE-2024-23111

score

<0.1

cvss

6.8

epss

1.0%

published

2024-06-11

kev added

—

first seen

2026-10-21

FortiOS versions 7.4.3 and below, 7.2 all versions, 7.0 all versions, and FortiProxy versions 7.4.2 and below, 7.2 all versions, 7.0 all versions contain a cross-site scripting caused by improper input neutralization during web page generation, letting remote privileged attackers with super-admin access execute JavaScript code via crafted HTTP GET requests.