Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."

Remediation

References

CVE-2014-1754

Related Vulnerabilities

WebLogic CVE-2019-2452 Vulnerability (CVE-2019-2452)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4196)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0217)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5953)

WordPress Plugin Discount Rules for WooCommerce Security Bypass (2.2.0)

Severity

Medium

Classification

CVE-2014-1754 CWE-707

Tags

Missing Update Known Vulnerabilities