2025-12-18 22:02:08
microsoft
PUBLISHED
Improper neutralization of input during web page generation (cross-site scripting) in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.