description: A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft Office SharePoint XSS Vulnerability." This affects Microsoft SharePoint.
problem types: Spoofing
affected:
{
product: Microsoft SharePoint
vendor: Microsoft
versions:
status: affected, version: Enterprise Server 2016
}