| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 8 | |
| office infopath | = 2003= 2007 | |
| sharepoint server | = 2007 | |
| sharepoint services | = 3.0 |
Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free