Threats tagged 'ghsa-pp9j-q4j9-fhg6'

CVE-2026-109454 is a critical cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint. It involves improper neutralization of input during web page generation, allowing an authorized attacker to perform spoofing attacks over a network. The vulnerability has a high CVSS score of 9.0, indicating severe impact on confidentiality, integrity, and availability. No specific affected versions or patch information are provided.