Description

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 Gold and SP1 and SharePoint Server 2013 Gold and SP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."

Remediation

References

CVE-2015-1636

Related Vulnerabilities

MySQL Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Vulnerability (CVE-2020-5258)

WordPress Plugin Per page add to head Cross-Site Request Forgery (1.4.3)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-3550)

WordPress Plugin jQuery Mega Menu Widget 'skin' Parameter Local File Include (1.0)

PHP Other Vulnerability (CVE-1999-0238)

Severity

Low

Classification

CVE-2015-1636 CWE-707

Tags

Missing Update Known Vulnerabilities