Unscored CVE-2011-1890 EUVD-2011-1888GHSA-525w-x42w-vp45

Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows …

Published Sep 15, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka "Editform Script Injection Vulnerability."

References

MS11-074 vendor-advisory
oval:org.mitre.oval:def:12788 vdb-entry signature
TA11-256A third-party-advisory