Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Remediation

References

CVE-2026-70355

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0460)

IBM WebSEAL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2019-4156)

Drupal CVE-2008-1729 Vulnerability (CVE-2008-1729)

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-56374)

Atlassian Confluence Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6342)

Severity

High

Classification

CVE-2026-70355 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities