This vulnerability arises from improper neutralization of input during web page generation, enabling cross‑site scripting that an authenticated attacker can exploit to spoof content on Microsoft SharePoint pages. The primary impact is the deception of users, allowing attackers to present falsified information or interfaces within the SharePoint environment.

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019 and Microsoft SharePoint Server Subscription Edition are affected. No specific version or patch information is listed, so all current releases of these products may be vulnerable.

The CVSS score of 4.6 indicates moderate risk, while no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Because the flaw requires an authorized user, the attack vector is likely via legitimate credentials or an internal threat. An attacker who can edit or publish SharePoint pages can inject malicious scripts that appear as legitimate content, resulting in spoofing of trusted pages for other users.