Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,678
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 8,691

Image ID Title
CVE-2026-109633 Cross-Site Scripting (XSS) in Frappe ERPNext (CVE-2026-109633)
CVE-2026-109612 Cross-Site Scripting (XSS) in Frappe ERPNext (CVE-2026-109612)
CVE-2026-109604 Cross-Site Scripting (XSS) in Frappe ERPNext (CVE-2026-109604)
CVE-2026-109602 Cross-Site Scripting (XSS) in Frappe (CVE-2026-109602)
CVE-2026-109597 Cross-Site Scripting (XSS) in Hugo (CVE-2026-109597)
CVE-2026-108936 Cross-Site Scripting (XSS) in Edimax BR-6208AC (CVE-2026-108936)
CVE-2026-108935 Cross-Site Scripting (XSS) in Edimax BR-6208AC (CVE-2026-108935)
CVE-2023-54408 Cross-Site Scripting (XSS) in Frappe (CVE-2023-54408)
CVE-2024-58391 Cross-Site Scripting (XSS) in Frappe (CVE-2024-58391)
CVE-2025-71432 Cross-Site Scripting (XSS) in Frappe ERPNext (CVE-2025-71432)
CVE-2025-71430 Cross-Site Scripting (XSS) in Frappe (CVE-2025-71430)
CVE-2026-108932 Cross-Site Scripting (XSS) in Netcore NR268 (CVE-2026-108932)
CVE-2026-108934 Cross-Site Scripting (XSS) in Edimax BR-6208AC (CVE-2026-108934)
CVE-2026-108933 Cross-Site Scripting (XSS) in Edimax BR-6208AC (CVE-2026-108933)
CVE-2026-104140 Cross-Site Scripting (XSS) in QGIS (CVE-2026-104140)
CVE-2026-109565 Cross-Site Scripting (XSS) in Rapyd Admin (CVE-2026-109565)
CVE-2026-109558 Cross-Site Scripting (XSS) in EdgeEver (CVE-2026-109558)
CVE-2026-109557 Cross-Site Scripting (XSS) in EdgeEver (CVE-2026-109557)
CVE-2026-108931 Cross-Site Scripting (XSS) in Netcore NR268 (CVE-2026-108931)
CVE-2025-27896 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2025-27897 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2025-27895 IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site...
CVE-2026-108919 Cross-Site Scripting (XSS) in SourceCodester Drug Recommendation System (CVE-2026-108919)
CVE-2026-108920 Cross-Site Scripting (XSS) in SourceCodester Drug Recommendation System (CVE-2026-108920)
CVE-2026-109300 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109300)
CVE-2026-109291 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109291)
CVE-2026-109288 Cross-Site Scripting (XSS) in Open WebUI (CVE-2026-109288)
CVE-2026-109266 Cross-Site Scripting (XSS) in ImageMagick (CVE-2026-109266)
CVE-2026-108908 Cross-Site Scripting (XSS) in Netcore NR268 (CVE-2026-108908)
CVE-2026-108478 Cross-Site Scripting (XSS) in Element Pack Elementor Addons (CVE-2026-108478)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details