CVE-2013-3180

published 2013-09-11

CVE-2013-3180: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka "POST XSS Vulnerability."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	sharepoint_foundation	—	—
microsoft	sharepoint_server	—	—

CWE-79