Skip to content
OpenAdvisories
Medium · 5.4 CVE-2018-8650 EUVD-2018-20261GHSA-v6hp-jm8g-jw5j

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reque…

Published Dec 12, 2018 · Updated Feb 28, 2025 · Assigned by microsoft

Description

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft SharePoint Enterprise Server 2016 —

References