Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,737

Image ID Title
CVE-2026-95515 Cross-Site Scripting (XSS) in Ninja Forms (CVE-2026-95515)
CVE-2026-94680 Cross-Site Scripting (XSS) in Post Grid (CVE-2026-94680)
CVE-2026-94671 Cross-Site Scripting (XSS) in Post Grid (CVE-2026-94671)
CVE-2026-94682 Cross-Site Scripting (XSS) in Podcast Importer SecondLine (CVE-2026-94682)
CVE-2026-94461 Cross-Site Scripting (XSS) in Ditty (CVE-2026-94461)
CVE-2026-94391 Cross-Site Scripting (XSS) in Ultimate FAQ (CVE-2026-94391)
CVE-2026-94500 Contributor Cross Site Scripting (XSS) in ElementsKit Elementor addons Lite <= 4.0.5 versions.
CVE-2026-94176 Cross-Site Scripting (XSS) in Mang Board WP (CVE-2026-94176)
CVE-2026-94168 Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.
CVE-2026-94179 Cross-Site Scripting (XSS) in Razorpay Payment Button (CVE-2026-94179)
CVE-2026-94118 Cross-Site Scripting (XSS) in WordPress (CVE-2026-94118)
CVE-2026-93774 Cross-Site Scripting (XSS) in WP Photo Album Plus (CVE-2026-93774)
CVE-2026-93622 Cross-Site Scripting (XSS) in WPS Limit Login (CVE-2026-93622)
CVE-2026-93772 Subscriber Cross Site Scripting (XSS) in wpForo Forum <= 3.1.5 versions.
CVE-2026-93526 Cross-Site Scripting (XSS) in Event Tickets (CVE-2026-93526)
CVE-2026-93618 Cross-Site Scripting (XSS) in JetTricks (CVE-2026-93618)
CVE-2026-92730 Cross-Site Scripting (XSS) in LimeSurvey Community Edition (CVE-2026-92730)
CVE-2026-77394 Cross-Site Scripting (XSS) in @openc3/vue-common (CVE-2026-77394)
CVE-2026-91775 Cross-Site Scripting (XSS) in LimeSurvey (CVE-2026-91775)
CVE-2026-93769 Cross-Site Scripting (XSS) in HumHub (CVE-2026-93769)
CVE-2026-18872 Cross-Site Scripting (XSS) in Ibm Financial Transaction Manager (CVE-2026-18872)
CVE-2026-63002 Cross-Site Scripting (XSS) in redaxo/source (CVE-2026-63002)
CVE-2026-63001 Cross-Site Scripting (XSS) in redaxo/source (CVE-2026-63001)
CVE-2026-59167 Cross-Site Scripting (XSS) in suneditor (CVE-2026-59167)
CVE-2026-5696 Reflected Cross-Site Scripting (XSS) in Microweber. The vulnerability lies in the ‘group’...
CVE-2026-95626 Cross-Site Scripting (XSS) in Tauri (CVE-2026-95626)
CVE-2026-91999 Cross-Site Scripting (XSS) in Apache (CVE-2026-91999)
CVE-2026-91928 Cross-Site Scripting (XSS) in Apache (CVE-2026-91928)
CVE-2026-73192 Cross-Site Scripting (XSS) in Apache (CVE-2026-73192)
CVE-2026-91852 Cross-Site Scripting (XSS) in Apache (CVE-2026-91852)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details