CVE-2011-1891

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
47.9%
top 2.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Sharepoint FoundationMicrosoft Sharepoint Services
Timeline
PublishedSep 15
Latest updateMay 14

Description

Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-2hw3-28v7-q78p: Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3↗2022-05-14
▶
CVEList
CVE-2011-1891: Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3↗2011-09-15
▶
CVE-2011-1891 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io