U.S. Dept Of Defense: Reflective Cross Site Scripting (XSS) on ███████/Pages

Summary: A reflection cross-site scripting XSS vulnerability was discovered in Microsoft SharePoint Server. The vulnerability was caused by improper sanitization of a web request to an affected SharePoint server. The vulnerability could have been exploited by an authenticated attacker to execute...

CVE-2017-0255

CVE-2017-0255 affects Microsoft SharePoint Foundation 2013 SP1. The vulnerability is an elevation of privilege caused by improper sanitization of a specially crafted web request, effectively a cross-site scripting-like flaw in SharePoint handling of input. Affected component/condition: SharePoint...