Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,773

Image ID Title
CVE-2026-90845 Cross-Site Scripting (XSS) in PHPGurukul Daily Expense Tracker System (CVE-2026-90845)
CVE-2026-85657 Cross-Site Scripting (XSS) in WordPress (CVE-2026-85657)
CVE-2026-85575 Cross-Site Scripting (XSS) in WordPress (CVE-2026-85575)
CVE-2026-90835 Cross-Site Scripting (XSS) in michaelliao itranswarp (CVE-2026-90835)
CVE-2026-81900 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81900)
CVE-2026-18116 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-18116)
CVE-2026-91146 Cross-Site Scripting (XSS) in Takahe (CVE-2026-91146)
CVE-2026-18117 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-18117)
CVE-2026-86898 Cross-Site Scripting (XSS) in Apple Ipados (CVE-2026-86898)
CVE-2026-81903 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81903)
CVE-2026-7884 Cross-Site Scripting (XSS) in IBM Cognos Analytics (CVE-2026-7884)
CVE-2026-78415 Cross-Site Scripting (XSS) in IBM Sterling Secure Proxy (CVE-2026-78415)
CVE-2026-13276 Cross-Site Scripting (XSS) in IBM Verify Identity Access (CVE-2026-13276)
CVE-2026-18119 Cross-Site Scripting (XSS) in Concrete CMS below (CVE-2026-18119)
CVE-2026-16186 Cross-Site Scripting (XSS) in IBM WebSphere Application Server (CVE-2026-16186)
CVE-2026-91021 Cross-Site Scripting (XSS) in Trilium Notes (CVE-2026-91021)
CVE-2026-90795 Cross-Site Scripting (XSS) in itsourcecode Loan Management System (CVE-2026-90795)
CVE-2026-90943 parallax filament-comments through 3.0.0 contains a stored cross-site scripting vulnerability in...
CVE-2026-4103 Insufficient HTML sanitization in the Publisher Portal and Developer Portal allows untrusted user...
CVE-2026-82019 Cross-Site Scripting (XSS) in TripleLift (CVE-2026-82019)
CVE-2026-90957 Cross-Site Scripting (XSS) in Affected (CVE-2026-90957)
CVE-2026-90931 Cross-Site Scripting (XSS) in LaraDashboard (CVE-2026-90931)
CVE-2026-78318 Cross-Site Scripting (XSS) in Apache (CVE-2026-78318)
CVE-2026-90696 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90696)
CVE-2026-90695 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90695)
CVE-2026-90694 Cross-Site Scripting (XSS) in SourceCodester Inventory Management System (CVE-2026-90694)
CVE-2026-88852 Cross-Site Scripting (XSS) in Snippets Free (CVE-2026-88852)
CVE-2026-88853 Cross-Site Scripting (XSS) in Modals Pro (CVE-2026-88853)
CVE-2026-85196 Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20...
CVE-2026-85189 Cross-Site Scripting (XSS) in Modals (CVE-2026-85189)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details