SharePoint Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2026-70355
Improper neutralization of input during web page generation (39cross-site scripting39) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.