<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 08:00:19 +0000</lastBuildDate>
    <item>
      <title>CVE-2023-29183</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2023-29183</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Fortinet FortiProxy, Fortinet FortiOS&lt;/p&gt;
&lt;p&gt;An improper neutralization of input during web page generation (&amp;#39;Cross-site Scripting&amp;#39;) vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated attacker to trigger malicious JavaScript code execution via crafted guest management setting.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Fortinet FortiProxy, Fortinet FortiOS&lt;/p&gt;
&lt;p&gt;An improper neutralization of input during web page generation (&amp;#39;Cross-site Scripting&amp;#39;) vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow an authenticated attacker to trigger malicious JavaScript code execution via crafted guest management setting.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2023-29183</guid>
    </item>
  </channel>
</rss>
