The vulnerability is caused by improper neutralization of user input during web page generation in Microsoft SharePoint Server, resulting in a Cross‑Site Scripting flaw (CWE‑79). An authorized attacker can inject malicious content that permits spoofing over a network, potentially misleading other users or services and undermining trust in web pages served by SharePoint.

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are affected. The CVE references manufacturers that provide updates for these products, but specific version details are not disclosed in the CNA data.

The vulnerability has a CVSS score of 5.4, indicating a moderate impact. The EPSS score is < 1% and it is not listed in CISA's KEV catalog, suggesting lower current exploitation likelihood. Because the exploit requires prior authorization, the risk is confined to environments where attackers have legitimate access. Nevertheless, the ability to spoof users or systems can facilitate further attacks such as phishing or credential theft.