Read the docs
Microsoft update

KB5002815

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 43

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01021 Published 2025-12-09 Fixed in 16.0.19127.20378 CWE-79