CVE-2014-4116: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows remote authenticated users to inject arbitrary web script or HTML via a modified list, aka "SharePoint Elevation of Privilege Vulnerability."...