Two vulnerabilities have been reported in Microsoft SharePoint, which can be exploited by malicious users or malicious people to conduct script insertion attacks.

1) The application does not properly sanitise HTML code using SafeHTML. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

2) The application does not properly sanitise HTML code using SafeHTML. This can be exploited to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious data is being viewed.

NOTE: This affects only sites that use SafeHTML to sanitise HTML code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Sirdarckcat, Google Inc.
2) The vendor credits Mario Heiderich.

Original Advisory
MS10-072 (KB2412048, KB2345304, KB2345322, KB2345212, KB2346298, KB2346411):
http://www.microsoft.com/technet/security/bulletin/MS10-072.mspx

Deep Links
Links available to Secunia VIM customers