CVE-2024-52967: An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to...
3.3
CVSS
Description
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiPortal 6.0.0 through 6.0.14 allows attacker to execute unauthorized code or commands via html injection.
Classification
CVE ID: CVE-2024-52967
CVSS Base Severity: LOW
CVSS Base Score: 3.3
Affected Products
Vendor: Fortinet
Product: FortiPortal
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 16.23% (scored less or equal to compared to others)
EPSS Date: 2025-02-12 (when was this score calculated)