A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via the srcintf parameter during Firewall Policy Creation.
https://fortiguard.com/psirt/FG-IR-17-017
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-12268