VAPT issue raised for CKEditor 4.13.0 Cross-Site Scripting
URL to JS file: https://testsite.com/_layouts/15/16.0.18526.20508/next/spclient/43.sp-canvas-sp-ckeditor-flight.js Associating Common Weakness Enumeration (CWE) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE 79) Evidence(s) Steps to derive Evidence(s) 1. Request to CKEditor File 2. Reponse indicating the version Recommendation(s) Upgrade CKEditor to the latest version 4.25.1-lts for extended support on the package. As this JS file is a part of SharePoint itself, cannot upgrade explicitly. Can anyone share the mitigation or plan to get it fixed except until Microsoft releases an update for same.
problems with sharepoint subscription edition post updates. psconfig fails.
We are facing 2 issues, but i suspect its related. OS is server 2025. Patches are current. We applied the sharepoint upgrade: KB5002784 yesterday. At that time we discovered psconfig failed to complete. Initially it was due to a problem with the sharepoint admin service. Of note it would not start. I found this to be a problem with windows exploit protection. Exempting the exe associated with the admin service fixed this and the service now starts. PSconfig still fails, its failing at the spcopysidebyside step. of note the sidebyside log that the error references is never created. additionally running the spcopysidebyside powershell script, and specifiying a log file location also results in no log being created. i suspect this may be another windows exploit protection exemption that needs to be created. at this time im not sure what one is required, nor how this is not effecting all installs vs just ours.SP 2019 On-Premise | Apply template to document library | Issue
Hello, I'm using SharePoint 2019 Server On-Premise. Task 1: Create a template of an existing document library. Task 2: Apply the newly created template to a new document library. Task 1 was successful but I'm failing to succeed with Task 2. I simply do not find the option to use an existing template. For clarification, I do not want to use a document template but a template for the document library, so the columns are copied to the new document library including the column formatting. I would appreciate pointers. Thank you and all the best, VarDumped
Quick Links “Button” layout drawers stuck open on modern SharePoint page
We’re using the Quick Links web part in Button layout on a modern SharePoint Online page. Normally, the label “drawer” only appears when you hover over the button. Recently, the drawers under all buttons are stuck permanently open (see red lines below marking the title drawers that I want to disappear). We must use the Button layout for our design standards, so switching to another layout is not an option Our IT team says there’s no HTML/CSS toggle to control this, and publishing an older page version would undo recent changes without guaranteeing a fix Rebuilding the web part isn’t realistic since we don’t have all the original links and images. This has happened before, but usually it “clears up” after some time — this time it’s persistent. Has anyone else run into this? Is this a known regression with Button layout, and is there a fix? Any guidance would be appreciated.
Connecting SharePoint to Azure
Hi I have a question regarding the following SharePoint Drive on Primary Account My primary account is edwin@getxxx.io. I’m having difficulty attaching a SharePoint drive to this account. This is separate from the OAuth app itself— I simply want to ensure that this account has a SharePoint drive available. Shouldn’t this be possible, and if so, what steps do I need to take to enable it on azure and the SharePoint admin? OAuth Application Account Confusion I created an OAuth application under my edwin@xxx.io account. Strangely, I’m able to connect to it from my other account (edwin@onmicrosoftaccount). I assumed OAuth apps were only accessible within their registered domain. Could you clarify why my other account can access the application, and how account/domain setup should work in this case?
SharePoint guests can't login even with correct permissions
A client is unable to use SharePoint with guest users. When attempting access, an error message is displayed with no specific details—only a generic "unknown issue" notice. Error Message Displayed: "But we're on it! Please try again later. If this problem persists, contact your support team and include these technical details." Technical Details Provided: Correlation ID: Date and Time: August 21, 2025 — 6:30:02 PM (WAT) URL: User: Issue Type: Unknown issueIs there any way to add time line webPart in modern team sites?
Actually I tried to find the time line web part on a modern team site but I didn't find it although I activate a lot of features on the web and the site i don't know why! But when I tried to find it on a new site collection team site I got it. so do anybody can help adding the time line web part to a SharePoint modern team site?
