Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 9,073

Image ID Title
CVE-2026-13755 Cross-Site Scripting (XSS) in Tickera – Sell Tickets & Manage Events (WordPress plugin) (CVE-2026-13755)
CVE-2026-12869 Cross-Site Scripting (XSS) in Header Footer Builder for Elementor (WordPress plugin) (CVE-2026-12869)
CVE-2026-12978 Cross-Site Scripting (XSS) in FunnelKit (WordPress plugin) (CVE-2026-12978)
CVE-2026-11371 Cross-Site Scripting (XSS) in BetterDocs (WordPress plugin) (CVE-2026-11371)
CVE-2026-15306 Cross-Site Scripting (XSS) in WordPress (CVE-2026-15306)
CVE-2026-13042 Cross-Site Scripting (XSS) in RPB Chessboard (WordPress plugin) (CVE-2026-13042)
CVE-2026-15652 Cross-Site Scripting (XSS) in WordPress (CVE-2026-15652)
CVE-2026-14987 Cross-Site Scripting (XSS) in GiveWP – Donation Plugin and Fundraising Platform (WordPress plugin) (CVE-2026-14987)
CVE-2026-13005 Cross-Site Scripting (XSS) in MxChat – AI Chatbot & Content Generation for (WordPress plugin) (CVE-2026-13005)
CVE-2026-54498 Cross-Site Scripting (XSS) in view_component (CVE-2026-54498)
CVE-2026-26719 Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute...
CVE-2026-49867 Cross-Site Scripting (XSS) in DataEase (CVE-2026-49867)
CVE-2026-62948 Cross-Site Scripting (XSS) in OpenWrt (CVE-2026-62948)
CVE-2026-62378 Cross-Site Scripting (XSS) in RustFS Console (CVE-2026-62378)
CVE-2026-1562 Cross-Site Scripting (XSS) in Pega Platform (CVE-2026-1562)
CVE-2026-1563 Cross-Site Scripting (XSS) in Pega Platform (CVE-2026-1563)
CVE-2026-9007 Cross-Site Scripting (XSS) in HCL Notes (CVE-2026-9007)
CVE-2026-41580 Cross-Site Scripting (XSS) in Stirling-PDF (CVE-2026-41580)
CVE-2026-61453 Cross-Site Scripting (XSS) in getgrav/grav (CVE-2026-61453)
CVE-2026-57833 The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS in relation to the...
CVE-2026-58077 The Joomla extension 4Analytics is vulnerable to an unauthenticated stored XSS. A specially...
CVE-2026-42447 Cross-Site Scripting (XSS) in jadx (CVE-2026-42447)
CVE-2026-48371 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-48371)
CVE-2026-48263 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48263)
CVE-2026-48355 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48355)
CVE-2026-48253 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48253)
CVE-2026-47999 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-47999)
CVE-2026-48260 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48260)
CVE-2026-48262 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48262)
CVE-2026-48257 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-48257)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details