← Database

CVE-2010-3243

MEDIUM CVSS: 4.3 Published: 2010-10-13 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "HTML Sanitization Vulnerability."

Affected Platforms

Microsoft Windows 7Microsoft Windows XpMicrosoft Sharepoint ServerMicrosoft Sharepoint ServicesMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Windows VistaMicrosoft Internet Explorer

Weakness Type

CWE-79, CWE-79

References