Hoangnx99

This issue allows remote attackers to execute arbitrary code on affected installations of Xiaomi Pro 13 smartphones. User interaction is required to exploit this issue, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the manual-upgrade.html file, where the process does not properly sanitize user-supplied data for the `manualUpgradeInfo` parameter, leading to the injection of an arbitrary script. An attacker can leverage this issue to execute code in the context of the current user.

The issue is related to insufficient input validation in Microsoft SharePoint Server and its variants. This can be exploited by a remote attacker using specially crafted data to execute arbitrary code.