CVE-2021-41029: Fortinet Fortiwlm

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows attacker to store malicious javascript code in the device and trigger it via crafted HTTP requests

Affected products

• Fortinet Fortiwlm: up to and including 8.6.1

Published 2021-12-08. Last modified 2026-06-17.