An improper neutralization of input during web page generation in Microsoft SharePoint manifests as a cross‑site scripting flaw. The vulnerability permits an authenticated attacker who can submit content to the web interface to cause the server to render malicious scripts that appear as legitimate SharePoint pages, resulting in spoofing over the network. The attack would allow the attacker to present false content to users, potentially misleading them about the authenticity of the SharePoint environment.

Microsoft SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition are affected. No specific patch versions are listed, so all presently supported releases of these products are impacted until a vendor fix is applied.

The CVSS score of 5.4 signifies moderate severity. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires authorized access to the SharePoint environment; the most likely attack path involves submitting malicious input through the web interface, which the server echoes without proper encoding. The vulnerability therefore presents a moderate risk to the integrity and trustworthiness of the SharePoint interface.