Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-45453

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-45453.

Coverage Span: 2026-06-16
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-45453 — Microsoft SharePoint Server Workflow Pages DocURL Parameter Reflected Cross-Site Scripting

CVE-2026-45453: reflected XSS in three SharePoint workflow pages—DocURL is written unencoded into href attributes, executing on hover and enabling session hijacking; fixed in June 2026.