Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

Remediation

References

CVE-2015-1633

Related Vulnerabilities

TCExam Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5747)

WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)

Oracle Application Server CVE-2006-3713 Vulnerability (CVE-2006-3713)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (4.10.7)

Collabtive Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5285)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-1633