Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script in Username Vulnerability."

Remediation

References

CVE-2012-1861

Related Vulnerabilities

Ruby Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2017-17405)

WordPress Plugin Pay With Tweet SQL Injection and Cross-Site Scripting Vulnerabilities (1.1)

Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-28375)

Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1270)

SharePoint Numeric Truncation Error Vulnerability (CVE-2026-55142)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-1861