sharepoint_manager_plus vulnerabilities
CVEs whose affected-version data names the sharepoint_manager_plus package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-119682High· 7.9Improper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus
An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine SharePoint Manager Plus (SPMP). A low-privileged authenticated user can bypass authorization checks to read and modify…
▾ TwilightManageEngine · SharePoint Manager PlusEPSS 0.34%via CVEORG
CVE-2026-119680High· 8.5Stored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature
A stored cross-site scripting (XSS) vulnerability exists in the chart feature of SharePoint Manager Plus (SPMP) due to improper sanitization and HTML encoding of user-controlled data. An attacker can inject malicious HTML or JavaScript i…
▾ TwilightManageEngine · SharePoint Manager PlusEPSS 0.24%via CVEORG