Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,766

Image ID Title
CVE-2026-77606 Cross-Site Scripting (XSS) in mediawiki/semantic-media-wiki (CVE-2026-77606)
CVE-2026-77607 Cross-Site Scripting (XSS) in mediawiki/semantic-media-wiki (CVE-2026-77607)
CVE-2026-1037 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1037)
CVE-2026-1025 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1025)
CVE-2026-1031 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1031)
CVE-2026-1029 Cross-Site Scripting (XSS) in IBM Common Licensing Agent (CVE-2026-1029)
CVE-2025-36147 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.16...
CVE-2025-61682 Cross-Site Scripting (XSS) in mediawiki/semantic-media-wiki (CVE-2025-61682)
CVE-2026-93659 Cross-Site Scripting (XSS) in Concrete CMS Community Store (CVE-2026-93659)
CVE-2026-93505 Cross-Site Scripting (XSS) in SveltyCMS (CVE-2026-93505)
CVE-2026-79294 Cross-Site Scripting (XSS) in Moonshot AI Kimi (CVE-2026-79294)
CVE-2026-90884 Cross-Site Scripting (XSS) in WP Recipe Maker (WordPress plugin) (CVE-2026-90884)
CVE-2026-87915 Cross-Site Scripting (XSS) in WordPress (CVE-2026-87915)
CVE-2026-18405 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18405)
CVE-2026-15797 Cross-Site Scripting (XSS) in WordPress (CVE-2026-15797)
CVE-2026-83561 Cross-Site Scripting (XSS) in Complianz GDPR/CCPA Cookie Consent Banner (WordPress plugin) (CVE-2026-83561)
CVE-2026-40534 Cross-Site Scripting (XSS) in Synology DiskStation Manager (CVE-2026-40534)
CVE-2025-13533 Cross-Site Scripting (XSS) in CSS & JavaScript Toolbox (WordPress plugin) (CVE-2025-13533)
CVE-2026-13623 Cross-Site Scripting (XSS) in Synology DiskStation Manager (CVE-2026-13623)
CVE-2026-92554 Cross-Site Scripting (XSS) in WordPress (CVE-2026-92554)
CVE-2026-92622 Cross-Site Scripting (XSS) in Strong Testimonials (WordPress plugin) (CVE-2026-92622)
CVE-2026-92249 Cross-Site Scripting (XSS) in Qi Addons For Elementor (WordPress plugin) (CVE-2026-92249)
CVE-2026-90981 Cross-Site Scripting (XSS) in Newsletter – Send awesome emails from (WordPress plugin) (CVE-2026-90981)
CVE-2026-67103 Cross-Site Scripting (XSS) in HCL BigFix Service Management (CVE-2026-67103)
CVE-2026-17586 Cross-Site Scripting (XSS) in WordPress (CVE-2026-17586)
CVE-2026-15004 Cross-Site Scripting (XSS) in WordPress (CVE-2026-15004)
CVE-2026-14472 Cross-Site Scripting (XSS) in Kubio AI Page Builder (WordPress plugin) (CVE-2026-14472)
CVE-2026-11757 Cross-Site Scripting (XSS) in Bar Association Website (CVE-2026-11757)
CVE-2026-92561 Cross-Site Scripting (XSS) in Booking Calendar (WordPress plugin) (CVE-2026-92561)
CVE-2026-89330 Cross-Site Scripting (XSS) in WordPress (CVE-2026-89330)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details