CVE-2013-3179: Microsoft SharePoint Foundation

Medium severity, CVSS 4.3. EPSS: 14.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "SharePoint XSS Vulnerability."

Affected products

• Microsoft SharePoint Foundation: version 2010 only
• Microsoft SharePoint Server: version 2007 only; version 2010 only
• Microsoft SharePoint Services: version 3.0 only

Published 2013-09-11. Last modified 2026-06-16.