XSS in Microsoft Sharepoint Foundation
CVE-2013-0083
Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via crafted content, leading to administrative command execution, aka "SharePoint XSS Vulnerability."
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.143 (96.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Sharepoint_foundation — versions 2010
- Microsoft Sharepoint_server — versions 2010
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)