Cross-Site Scripting Vulnerability in Microsoft Office SharePoint

CVE-2025-64672

What is CVE-2025-64672?

An issue in Microsoft Office SharePoint allows an authorized attacker to leverage improper input neutralization during the web page generation process, leading to the potential for spoofing attacks. This vulnerability may allow attackers to inject malicious scripts into web pages viewed by other users, compromising the integrity and confidentiality of user data and interactions. Organizations using affected versions of SharePoint should implement necessary patches and review security protocols to mitigate risks.

References