Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,678
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 8,691

Image ID Title
CVE-2026-62064 Cross-Site Scripting (XSS) in Ambed (CVE-2026-62064)
CVE-2026-62034 Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison...
CVE-2026-62037 Cross-Site Scripting (XSS) in Document Embedder (CVE-2026-62037)
CVE-2026-57742 Cross-Site Scripting (XSS) in Kids Planet (CVE-2026-57742)
CVE-2026-62027 Cross-Site Scripting (XSS) in Team Section Block (CVE-2026-62027)
CVE-2026-42715 Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVE-2026-42711 Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
CVE-2026-42709 Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for...
CVE-2026-42697 Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5...
CVE-2026-42693 Cross-Site Scripting (XSS) in Jannah (CVE-2026-42693)
CVE-2026-42702 Cross-Site Scripting (XSS) in Tutor LMS (CVE-2026-42702)
CVE-2026-42699 Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVE-2026-40803 Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.
CVE-2026-42631 Cross-Site Scripting (XSS) in Qode Music (CVE-2026-42631)
CVE-2026-42632 Cross-Site Scripting (XSS) in Qode Real Estate (CVE-2026-42632)
CVE-2026-39799 Cross-Site Scripting (XSS) in WP File Download (CVE-2026-39799)
CVE-2026-39800 Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24...
CVE-2026-57806 Cross-Site Scripting (XSS) in Martfury - WooCommerce Marketplace WordPress Theme (CVE-2026-57806)
CVE-2026-94160 Cross-Site Scripting (XSS) in ThemeStek Extras for LabtechCO Theme (CVE-2026-94160)
CVE-2026-97264 Cross-Site Scripting (XSS) in WPAdverts (CVE-2026-97264)
CVE-2026-97263 Cross-Site Scripting (XSS) in WPAdverts (CVE-2026-97263)
CVE-2026-102388 Cross-Site Scripting (XSS) in Forminator (CVE-2026-102388)
CVE-2026-107657 Cross-Site Scripting (XSS) in WordPress (CVE-2026-107657)
CVE-2026-4791 Cross-Site Scripting (XSS) in PeproDev Ultimate Profile Solutions (WordPress plugin) (CVE-2026-4791)
CVE-2026-97396 Cross-Site Scripting (XSS) in Email Marketing for WordPress and WooCommerce – Retainful (WordPress plugin) (CVE-2026-97396)
CVE-2026-96765 Cross-Site Scripting (XSS) in WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WordPress plugin) (CVE-2026-96765)
CVE-2026-97340 Cross-Site Scripting (XSS) in Avada | Website Builder For WordPress & WooCommerce (WordPress theme) (CVE-2026-97340)
CVE-2026-96563 Cross-Site Scripting (XSS) in Motors – Car Dealership & Classified Listings Plugin (WordPress plugin) (CVE-2026-96563)
CVE-2026-93951 Cross-Site Scripting (XSS) in Zeinet (CVE-2026-93951)
CVE-2026-96278 Cross-Site Scripting (XSS) in WP Photo Album Plus (WordPress plugin) (CVE-2026-96278)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details