A vulnerability described as problematic has been identified in Fortinet FortiOS and FortiProxy up to 6.4.16/7.0.17/7.2.12/7.4.7/7.6.2. The affected element is an unknown function. Executing manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-31366. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.