Description

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Remediation

References

CVE-2025-49704

Related Vulnerabilities

WordPress Plugin Google Analytics Opt-Out Cross-Site Scripting (2.3.4)

Tornado Improper Input Validation Vulnerability (CVE-2012-2374)

WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)

Oracle JRE CVE-2020-2655 Vulnerability (CVE-2020-2655)

Python Out-of-bounds Read Vulnerability (CVE-2025-13836)

Severity

High

Classification

CVE-2025-49704 CWE-94 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities