The host is installed with Microsoft SharePoint Foundation 2013 and is prone to a XSS spoofing vulnerability. A flaw is present in the application, which fails to properly sanitize user-supplied web requests. An attacker who successfully exploited this vulnerability could perform persistent cross-site scripting attacks and run script (in the security context of the logged-on user) with malicious content that appears authentic.