Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,728

Image ID Title
CVE-2026-59671 Cross-Site Scripting (XSS) in Repasat application (CVE-2026-59671)
CVE-2026-59669 Cross-Site Scripting (XSS) in Repasat application (CVE-2026-59669)
CVE-2026-97663 Cross-Site Scripting (XSS) in Customer Reviews for WooCommerce (WordPress plugin) (CVE-2026-97663)
CVE-2026-97342 Cross-Site Scripting (XSS) in JetFormBuilder — Dynamic Blocks Form Builder (WordPress plugin) (CVE-2026-97342)
CVE-2026-97641 Cross-Site Scripting (XSS) in Relevanssi – A Better Search (WordPress plugin) (CVE-2026-97641)
CVE-2026-97338 Cross-Site Scripting (XSS) in Download Manager (WordPress plugin) (CVE-2026-97338)
CVE-2026-97336 Cross-Site Scripting (XSS) in CMB2 (WordPress plugin) (CVE-2026-97336)
CVE-2026-96871 Cross-Site Scripting (XSS) in Mang Board (WordPress plugin) (CVE-2026-96871)
CVE-2026-96567 Cross-Site Scripting (XSS) in MW WP Form (WordPress plugin) (CVE-2026-96567)
CVE-2026-96578 Cross-Site Scripting (XSS) in GSpeech TTS – WordPress Text To Speech Plugin (WordPress plugin) (CVE-2026-96578)
CVE-2026-96566 Cross-Site Scripting (XSS) in Newsletter – Send awesome emails from (WordPress plugin) (CVE-2026-96566)
CVE-2026-96647 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96647)
CVE-2026-93756 Cross-Site Scripting (XSS) in WordPress (CVE-2026-93756)
CVE-2026-93880 Cross-Site Scripting (XSS) in Greenshift – animation and page builder blocks (WordPress plugin) (CVE-2026-93880)
CVE-2026-95817 Cross-Site Scripting (XSS) in DoFollow Case by Case (WordPress plugin) (CVE-2026-95817)
CVE-2026-95670 Cross-Site Scripting (XSS) in No External Links (WordPress plugin) (CVE-2026-95670)
CVE-2026-103426 Cross-Site Scripting (XSS) in Relevanssi Premium (WordPress plugin) (CVE-2026-103426)
CVE-2026-102772 Cross-Site Scripting (XSS) in CMB2 (WordPress plugin) (CVE-2026-102772)
CVE-2026-100182 Cross-Site Scripting (XSS) in Download Monitor (WordPress plugin) (CVE-2026-100182)
CVE-2026-100107 Cross-Site Scripting (XSS) in Kubio AI Page Builder (WordPress plugin) (CVE-2026-100107)
CVE-2026-93029 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts...
CVE-2026-93697 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify...
CVE-2026-1661 Cross-Site Scripting (XSS) in WP Mail Logging (WordPress plugin) (CVE-2026-1661)
CVE-2026-102565 Cross-Site Scripting (XSS) in BA Book Everything (WordPress plugin) (CVE-2026-102565)
CVE-2026-91022 Cross-Site Scripting (XSS) in Motors (WordPress plugin) (CVE-2026-91022)
CVE-2026-90438 Cross-Site Scripting (XSS) in WordPress (CVE-2026-90438)
CVE-2026-84925 Cross-Site Scripting (XSS) in Avada | Website Builder For WordPress & WooCommerce (WordPress theme) (CVE-2026-84925)
CVE-2026-78471 Cross-Site Scripting (XSS) in Autoptimize (WordPress plugin) (CVE-2026-78471)
CVE-2026-85016 Cross-Site Scripting (XSS) in Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-85016)
CVE-2026-13718 Cross-Site Scripting (XSS) in Tabs Responsive (WordPress plugin) (CVE-2026-13718)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details