Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 8,783

Image ID Title
CVE-2026-19769 Cross-Site Scripting (XSS) in WordPress (CVE-2026-19769)
CVE-2026-19861 Cross-Site Scripting (XSS) in JetFormBuilder — Dynamic Blocks Form Builder (WordPress plugin) (CVE-2026-19861)
CVE-2026-18843 Cross-Site Scripting (XSS) in Beaver Builder Plugin (WordPress plugin) (CVE-2026-18843)
CVE-2026-18406 Cross-Site Scripting (XSS) in WordPress (CVE-2026-18406)
CVE-2026-3853 Cross-Site Scripting (XSS) in Divi (WordPress theme) (CVE-2026-3853)
CVE-2026-15984 Cross-Site Scripting (XSS) in QuickCal (WordPress plugin) (CVE-2026-15984)
CVE-2026-16649 Cross-Site Scripting (XSS) in Gravity Forms (WordPress plugin) (CVE-2026-16649)
CVE-2025-15694 Cross-Site Scripting (XSS) in Joli Table Of Contents (WordPress plugin) (CVE-2025-15694)
CVE-2026-8625 Cross-Site Scripting (XSS) in WordPress (CVE-2026-8625)
CVE-2026-8623 Cross-Site Scripting (XSS) in WordPress (CVE-2026-8623)
CVE-2025-14945 Cross-Site Scripting (XSS) in Events Manager - Calendar, Bookings, Tickets, and more! (WordPress plugin) (CVE-2025-14945)
CVE-2026-77233 Cross-Site Scripting (XSS) in WordPress (CVE-2026-77233)
CVE-2026-18404 Cross-Site Scripting (XSS) in Social Chat – Click To Chat App Button (WordPress plugin) (CVE-2026-18404)
CVE-2026-77263 Cross-Site Scripting (XSS) in WordPress (CVE-2026-77263)
CVE-2022-26961 Cross-Site Scripting (XSS) in Italtel NetMatch-S (CVE-2022-26961)
CVE-2026-73848 Cross-Site Scripting (XSS) in Emlog (CVE-2026-73848)
CVE-2026-53758 Cross-Site Scripting (XSS) in Emlog (CVE-2026-53758)
CVE-2026-78849 Cross-Site Scripting (XSS) in Netgate pfSense Plus software (CVE-2026-78849)
CVE-2026-38961 Cross-Site Scripting (XSS) in Netgate pfSense Plus (CVE-2026-38961)
CVE-2026-79419 Cross-Site Scripting (XSS) in EMX Tecnologia Gestao X Business Suite (CVE-2026-79419)
CVE-2026-79418 Cross-Site Scripting (XSS) in EMX Tecnologia Gestao X (CVE-2026-79418)
CVE-2026-75170 Cross-Site Scripting (XSS) in HubCore platform (CVE-2026-75170)
CVE-2022-35497 Cross-Site Scripting (XSS) in Trimble TM4WEB (CVE-2022-35497)
CVE-2022-35499 Cross-Site Scripting (XSS) in Trimble TM4WEB (CVE-2022-35499)
CVE-2026-8447 Cross-Site Scripting (XSS) in Langflow macOS (CVE-2026-8447)
CVE-2026-19727 Cross-Site Scripting (XSS) in Library Information and Document Automation Program (CVE-2026-19727)
CVE-2026-14466 It’s possible to run a stored XSS in Stormshield’s web administration panel. To exploit this...
CVE-2026-77818 Cross-Site Scripting (XSS) in Library Information and Document Automation Program (CVE-2026-77818)
CVE-2026-19057 Cross-Site Scripting (XSS) in Gastromenum Ticket and QR Menu System (CVE-2026-19057)
CVE-2026-85613 Cross-Site Scripting (XSS) in OpenPanel (CVE-2026-85613)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details