Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 9,173
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894379 Cwe 8624272 Cwe 2844116 Cwe 4163958 Cwe 1193244 Cwe 2003244 Cwe 1253187 Cwe 202918 Cwe 222868 Cwe 7872615 Cwe 782110 Cwe 942003 Cwe 741960 Cwe 8631940 Cwe 1221847

🛡 Vulnerabilities tagged with this 9,184

Image ID Title
CVE-2026-8891 Cross-Site Scripting (XSS) in BitForm (WordPress plugin) (CVE-2026-8891)
CVE-2026-8894 Cross-Site Scripting (XSS) in iWR Tooltip (WordPress plugin) (CVE-2026-8894)
CVE-2026-8897 Cross-Site Scripting (XSS) in Shortcode Buddy (WordPress plugin) (CVE-2026-8897)
CVE-2026-8898 Cross-Site Scripting (XSS) in Events In City (WordPress plugin) (CVE-2026-8898)
CVE-2026-8867 Cross-Site Scripting (XSS) in Post Category Gallery (WordPress plugin) (CVE-2026-8867)
CVE-2026-8868 Cross-Site Scripting (XSS) in Single Mailchimp (WordPress plugin) (CVE-2026-8868)
CVE-2026-8869 Cross-Site Scripting (XSS) in Mutual Funds Data (WordPress plugin) (CVE-2026-8869)
CVE-2026-8870 Cross-Site Scripting (XSS) in Team Master – A Modern WordPress Team Showcase (WordPress plugin) (CVE-2026-8870)
CVE-2026-8871 Cross-Site Scripting (XSS) in Formidable Kinetic (WordPress plugin) (CVE-2026-8871)
CVE-2026-8872 Cross-Site Scripting (XSS) in Animate Your Content (WordPress plugin) (CVE-2026-8872)
CVE-2026-8873 Cross-Site Scripting (XSS) in Content Slideshow (WordPress plugin) (CVE-2026-8873)
CVE-2026-8837 Cross-Site Scripting (XSS) in WP Iframe Geo Style for Amazon affiliates (WordPress plugin) (CVE-2026-8837)
CVE-2026-8842 Cross-Site Scripting (XSS) in Google+ Link Name (WordPress plugin) (CVE-2026-8842)
CVE-2026-8844 Cross-Site Scripting (XSS) in Responsive Check (WordPress plugin) (CVE-2026-8844)
CVE-2026-8845 Cross-Site Scripting (XSS) in Islamic Database (WordPress plugin) (CVE-2026-8845)
CVE-2026-8846 Cross-Site Scripting (XSS) in Tuxquote (WordPress plugin) (CVE-2026-8846)
CVE-2026-8847 Cross-Site Scripting (XSS) in Dideo (WordPress plugin) (CVE-2026-8847)
CVE-2026-8866 Cross-Site Scripting (XSS) in jQuery googleslides (WordPress plugin) (CVE-2026-8866)
CVE-2026-8048 Cross-Site Scripting (XSS) in My Email Shortcode (WordPress plugin) (CVE-2026-8048)
CVE-2026-8698 Cross-Site Scripting (XSS) in Cryptocurrency Prijsvergelijking Widget (WordPress plugin) (CVE-2026-8698)
CVE-2026-8701 Cross-Site Scripting (XSS) in GNTT Post Title Ticker (WordPress plugin) (CVE-2026-8701)
CVE-2026-8702 Cross-Site Scripting (XSS) in GBI To Print (WordPress plugin) (CVE-2026-8702)
CVE-2026-8703 Cross-Site Scripting (XSS) in Endless Scroll (WordPress plugin) (CVE-2026-8703)
CVE-2026-8707 Cross-Site Scripting (XSS) in NS Product icon badge (WordPress plugin) (CVE-2026-8707)
CVE-2026-8040 Cross-Site Scripting (XSS) in faq shortocde (WordPress plugin) (CVE-2026-8040)
CVE-2026-6268 Cross-Site Scripting (XSS) in EventPress (WordPress theme) (CVE-2026-6268)
CVE-2026-6287 Cross-Site Scripting (XSS) in ShopLentor - WooCommerce Builder for Elementor & Gutenberg (WordPress plugin) (CVE-2026-6287)
CVE-2026-48999 Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target...
CVE-2026-9022 Cross-Site Scripting (XSS) in Splide Carousel Block (WordPress plugin) (CVE-2026-9022)
CVE-2026-6565 Cross-Site Scripting (XSS) in WordPress (CVE-2026-6565)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details