Other security products
CVE-2024-48893: Improper neutralization of input during web page generation in FortiSOAR
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| FortiSOAR 7.3.0 to 7.3.3 | Upgrade past 7.3.3; see the advisory |
| FortiSOAR 7.2.1 to 7.2.2 | Upgrade past 7.2.2; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiSOAR 7.3.0 through 7.3.3, 7.2.1 through 7.2.2 may allow an authenticated attacker to perform a stored cross site scripting (XSS) attack via the creation of malicious playbook.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.