Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 9,073

Image ID Title
CVE-2026-13957 Cross-Site Scripting (XSS) in Google Chrome (CVE-2026-13957)
CVE-2026-13836 Cross-Site Scripting (XSS) in Google Chrome (CVE-2026-13836)
CVE-2026-10585 Cross-Site Scripting (XSS) in Github (CVE-2026-10585)
CVE-2026-11594 Cross-Site Scripting (XSS) in IBM WebSphere Application Server (CVE-2026-11594)
CVE-2025-36323 Cross-Site Scripting (XSS) in IBM watsonx.data intelligence (CVE-2025-36323)
CVE-2026-11708 Cross-Site Scripting (XSS) in IBM WebSphere Application Server (CVE-2026-11708)
CVE-2025-36320 Cross-Site Scripting (XSS) in IBM watsonx.data intelligence (CVE-2025-36320)
CVE-2026-11712 Cross-Site Scripting (XSS) in IBM WebSphere Application Server (CVE-2026-11712)
CVE-2026-10513 Cross-Site Scripting (XSS) in Webmention (WordPress plugin) (CVE-2026-10513)
CVE-2026-58371 Cross-Site Scripting (XSS) in SeaweedFS (CVE-2026-58371)
CVE-2026-48307 Cross-Site Scripting (XSS) in Adobe Coldfusion (CVE-2026-48307)
CVE-2026-8403 Cross-Site Scripting (XSS) in SYSGUARD (CVE-2026-8403)
CVE-2026-52760 Cross-Site Scripting (XSS) in activemq (CVE-2026-52760)
CVE-2026-6953 Cross-Site Scripting (XSS) in Intermark IT's WebControl CMS (CVE-2026-6953)
CVE-2026-6954 Cross-Site Scripting (XSS) in Intermark IT's WebControl CMS (CVE-2026-6954)
CVE-2026-8141 Cross-Site Scripting (XSS) in Ajax Load More - Filters (WordPress plugin) (CVE-2026-8141)
CVE-2026-63430 Cross-Site Scripting (XSS) in ammonia (CVE-2026-63430)
CVE-2026-56809 Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor...
CVE-2026-12560 Cross-Site Scripting (XSS) in Editorial Rating – Product Review & Rating System (WordPress plugin) (CVE-2026-12560)
CVE-2026-12114 Cross-Site Scripting (XSS) in Team Members – Multi Language Supported Team Plugin (WordPress plugin) (CVE-2026-12114)
CVE-2026-54889 Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in leandrocp mdex allows cross-site…
CVE-2026-53427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leandrocp MDEx…
CVE-2026-57958 Cross-Site Scripting (XSS) in Laravel Mixpost (CVE-2026-57958)
CVE-2026-57320 Cross-Site Scripting (XSS) in BEAR (CVE-2026-57320)
CVE-2026-57326 Cross-Site Scripting (XSS) in Business Directory (CVE-2026-57326)
CVE-2026-57328 Cross-Site Scripting (XSS) in Business Directory (CVE-2026-57328)
CVE-2026-57333 Cross-Site Scripting (XSS) in Link Whisper Free (CVE-2026-57333)
CVE-2026-57337 Cross-Site Scripting (XSS) in Landing Page Builder (CVE-2026-57337)
CVE-2026-57336 Cross-Site Scripting (XSS) in Jobify (CVE-2026-57336)
CVE-2026-57329 Cross-Site Scripting (XSS) in WooCommerce Designer Pro (CVE-2026-57329)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details