The vulnerability is caused by improper neutralization of user input during web page generation in Microsoft SharePoint, resulting in a Cross‑Site Scripting flaw (CWE‑79). An attacker who is already authorized on the system can inject malicious content that permits spoofing over a network, potentially misleading other users or services and undermining trust in web pages served by SharePoint.

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are affected. The CVE references manufacturers that provide updates for these products, but specific version details are not disclosed in the CNA data.

The vulnerability has a CVSS score of 5.4, indicating a moderate impact. No EPSS score is available and it is not listed in CISA's KEV catalog, suggesting lower current exploitation likelihood. Because the exploit requires an authorized attacker, the risk is confined to environments where users possess privileged SharePoint access. Nevertheless, the ability to spoof users or systems can facilitate further attacks such as phishing or credential theft.