CVE-2010-1257: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 22.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.

Affected products

• Microsoft Internet Explorer: version 8 only
• Microsoft Office Infopath: version 2003 only; version 2007 only
• Microsoft SharePoint Server: version 2007 only
• Microsoft SharePoint Services: version 3.0 only

Published 2010-06-08. Last modified 2026-06-16.