Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,728

Image ID Title
CVE-2026-109702 Cross-Site Scripting (XSS) in Social Share Buttons (CVE-2026-109702)
CVE-2026-105882 Cross-Site Scripting (XSS) in ThemeGrill User Registration user-registration (CVE-2026-105882)
CVE-2026-55876 Cross-Site Scripting (XSS) in Helium (CVE-2026-55876)
CVE-2026-57568 Cross-Site Scripting (XSS) in Lychee (CVE-2026-57568)
CVE-2026-58394 Cross-Site Scripting (XSS) in OPNsense (CVE-2026-58394)
CVE-2026-58391 Cross-Site Scripting (XSS) in OPNsense (CVE-2026-58391)
CVE-2026-58392 Cross-Site Scripting (XSS) in OPNsense (CVE-2026-58392)
CVE-2026-58390 Cross-Site Scripting (XSS) in OPNsense (CVE-2026-58390)
CVE-2026-59994 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-59994)
CVE-2026-55184 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-55184)
CVE-2026-53575 Cross-Site Scripting (XSS) in EspoCRM (CVE-2026-53575)
CVE-2026-108491 Cross-Site Scripting (XSS) in Everest Forms (CVE-2026-108491)
CVE-2026-108498 Cross-Site Scripting (XSS) in BSK PDF Manager (CVE-2026-108498)
CVE-2026-39991 Cross-Site Scripting (XSS) in Notes Station (CVE-2026-39991)
CVE-2026-47790 Cross-Site Scripting (XSS) in QuFTP Service (CVE-2026-47790)
CVE-2026-22896 Cross-Site Scripting (XSS) in Network & Virtual Switch (CVE-2026-22896)
CVE-2026-74920 Cross-Site Scripting (XSS) in Document Gallery (WordPress plugin) (CVE-2026-74920)
CVE-2026-88043 Cross-Site Scripting (XSS) in Mang Board WP (WordPress plugin) (CVE-2026-88043)
CVE-2026-17001 Cross-Site Scripting (XSS) in WordPress (CVE-2026-17001)
CVE-2026-78001 Cross-Site Scripting (XSS) in WordPress (CVE-2026-78001)
CVE-2026-78087 Cross-Site Scripting (XSS) in VK Blocks (WordPress plugin) (CVE-2026-78087)
CVE-2026-15180 Cross-Site Scripting (XSS) in Tracking Code Manager (WordPress plugin) (CVE-2026-15180)
CVE-2026-18557 Cross-Site Scripting (XSS) in Photo Gallery by 10Web – Mobile-Friendly Image Gallery (WordPress plugin) (CVE-2026-18557)
CVE-2026-18548 Cross-Site Scripting (XSS) in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-18548)
CVE-2026-18586 Cross-Site Scripting (XSS) in Premium Packages – Sell Digital Products Securely (WordPress plugin) (CVE-2026-18586)
CVE-2026-14572 Cross-Site Scripting (XSS) in WordPress (CVE-2026-14572)
CVE-2026-110849 Cross-Site Scripting (XSS) in n8n (CVE-2026-110849)
CVE-2026-110847 Cross-Site Scripting (XSS) in n8n (CVE-2026-110847)
CVE-2026-0316 Cross-Site Scripting (XSS) in Palo Alto Networks PAN-OS software enables (CVE-2026-0316)
CVE-2026-69194 Cross-Site Scripting (XSS) in FileRise (CVE-2026-69194)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details