Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,773

Image ID Title
CVE-2026-88742 Cross-Site Scripting (XSS) in Bacularis (CVE-2026-88742)
CVE-2026-88743 Cross-Site Scripting (XSS) in Bacularis (CVE-2026-88743)
CVE-2026-81925 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81925)
CVE-2026-76704 Cross-Site Scripting (XSS) in EdgeConnect SD-WAN Orchestrator (CVE-2026-76704)
CVE-2026-51133 Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104 allows...
CVE-2026-68534 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-68534)
CVE-2026-81898 Cross-Site Scripting (XSS) in Concrete CMS below (CVE-2026-81898)
CVE-2026-81899 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81899)
CVE-2026-39038 Cross-Site Scripting (XSS) in BharatMLStack (CVE-2026-39038)
CVE-2026-39040 Cross-Site Scripting (XSS) in BharatMLStack (CVE-2026-39040)
CVE-2026-39039 Cross-Site Scripting (XSS) in BharatMLStack (CVE-2026-39039)
CVE-2026-18113 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-18113)
CVE-2026-12749 Cross-Site Scripting (XSS) in Ibm Cloud Pak For Business Automation (CVE-2026-12749)
CVE-2026-12750 Cross-Site Scripting (XSS) in Ibm Cloud Pak For Business Automation (CVE-2026-12750)
CVE-2026-91854 Cross-Site Scripting (XSS) in code-projects Record Management System (CVE-2026-91854)
CVE-2026-81896 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81896)
CVE-2026-81897 Cross-Site Scripting (XSS) in Concrete CMS below CMS (CVE-2026-81897)
CVE-2026-81894 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81894)
CVE-2026-91944 Cross-Site Scripting (XSS) in crawl4ai (CVE-2026-91944)
CVE-2026-91942 Cross-Site Scripting (XSS) in crawl4ai (CVE-2026-91942)
CVE-2026-87793 Cross-Site Scripting (XSS) in Design Scuole Italia (WordPress theme) (CVE-2026-87793)
CVE-2026-44282 Cross-Site Scripting (XSS) in decidim-elections (CVE-2026-44282)
CVE-2026-90650 Cross-Site Scripting (XSS) in MotoPress Hotel Booking (WordPress plugin) (CVE-2026-90650)
CVE-2026-88618 Cross-Site Scripting (XSS) in 1024-lab SmartAdmin (CVE-2026-88618)
CVE-2026-15609 Cross-Site Scripting (XSS) in Bridge - Creative Multipurpose WordPress Theme (WordPress theme) (CVE-2026-15609)
CVE-2026-91922 Cross-Site Scripting (XSS) in Steedos Platform (CVE-2026-91922)
CVE-2026-18063 Cross-Site Scripting (XSS) in Job Postings (WordPress plugin) (CVE-2026-18063)
CVE-2026-15402 Cross-Site Scripting (XSS) in WordPress (CVE-2026-15402)
CVE-2026-90850 Cross-Site Scripting (XSS) in PHPGurukul Hostel Management System (CVE-2026-90850)
CVE-2026-90848 Cross-Site Scripting (XSS) in Governikus AusweisApp (CVE-2026-90848)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details