CVE-2026-119680

A stored cross-site scripting XSS vulnerability exists in the chart feature of SharePoint Manager Plus SPMP due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript into attributes used to generate charts, including users' full...