FortiSIEM Basic XSS: What to Know
FortiSIEM is affected by a Basic XSS vulnerability related to improper neutralization of script-related HTML tags. In certain cases, a privileged administrator could execute unauthorized commands.
Tag: XSS
Exchange OWA zero-day: OWAReaper long-term access
A Russian-linked group used an Exchange OWA zero-day to deliver OWAReaper via half-click XSS emails. The malware can maintain mailbox access even after clean-up and credential changes.