CVE-2018-8426

CVE-2018-8426 describes a cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server. The issue arises when a specially crafted web request to SharePoint servers is not properly sanitized, allowing an authenticated attacker to run scripts in the current user’s browser context ...