Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 9,068

Image ID Title
CVE-2026-82625 Cross-Site Scripting (XSS) in code-projects Simple Inventory System (CVE-2026-82625)
CVE-2026-82622 Cross-Site Scripting (XSS) in code-projects Employee Leave Managing System (CVE-2026-82622)
CVE-2026-40464 Cross-Site Scripting (XSS) in NSP (CVE-2026-40464)
CVE-2026-77850 Stored Cross-site Scripting vulnerability in ash-project ash_admin executes attacker-supplied record content as script…
CVE-2026-82601 Cross-Site Scripting (XSS) in SeaCMS (CVE-2026-82601)
CVE-2026-82554 Cross-Site Scripting (XSS) in SourceCodester Queue Management System (CVE-2026-82554)
CVE-2026-82654 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-82654)
CVE-2026-82646 Cross-Site Scripting (XSS) in WWBN AVideo (CVE-2026-82646)
CVE-2026-82653 Cross-Site Scripting (XSS) in SiYuan (CVE-2026-82653)
CVE-2026-82642 Cross-Site Scripting (XSS) in Readest (CVE-2026-82642)
CVE-2026-82488 Cross-Site Scripting (XSS) in Beetel (CVE-2026-82488)
CVE-2026-82483 Cross-Site Scripting (XSS) in coppermine-gallery Coppermine Photo Gallery (CVE-2026-82483)
CVE-2026-82482 Cross-Site Scripting (XSS) in coppermine-gallery Coppermine Photo Gallery (CVE-2026-82482)
CVE-2026-78364 Cross-Site Scripting (XSS) in MW WP Form (WordPress plugin) (CVE-2026-78364)
CVE-2026-81660 Cross-Site Scripting (XSS) in Groundhogg — CRM, Newsletters, and Marketing Automation (WordPress plugin) (CVE-2026-81660)
CVE-2026-14835 Cross-Site Scripting (XSS) in SOGO Add Script to Individual Pages Header Footer (WordPress plugin) (CVE-2026-14835)
CVE-2026-14307 Cross-Site Scripting (XSS) in geotargetingwp (WordPress plugin) (CVE-2026-14307)
CVE-2026-76585 Cross-Site Scripting (XSS) in Customer Reviews for WooCommerce (WordPress plugin) (CVE-2026-76585)
CVE-2026-82451 Cross-Site Scripting (XSS) in Formwork (CVE-2026-82451)
CVE-2026-76546 Cross-Site Scripting (XSS) in WordPress (CVE-2026-76546)
CVE-2026-55779 Cross-Site Scripting (XSS) in silverstripe/versioned (CVE-2026-55779)
CVE-2026-55696 Cross-Site Scripting (XSS) in privatebin/privatebin (CVE-2026-55696)
CVE-2026-76798 Cross-Site Scripting (XSS) in MongoDB Mongosql Transition Readiness Tool (CVE-2026-76798)
CVE-2026-76794 Cross-Site Scripting (XSS) in MongoDB MongoSQL Transition Readiness Tool (CVE-2026-76794)
CVE-2026-50980 Cross-Site Scripting (XSS) vulnerability in the DNS lookup/management component of oPanel before...
CVE-2026-39070 Cross-Site Scripting (XSS) in WordPress plugin (CVE-2026-39070)
CVE-2026-39071 Cross-Site Scripting (XSS) in WordPress plugin (CVE-2026-39071)
CVE-2026-55566 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55566)
CVE-2026-55549 Cross-Site Scripting (XSS) in org.yamcs:yamcs-core (CVE-2026-55549)
CVE-2026-81760 Cross-Site Scripting (XSS) in JetEngine (CVE-2026-81760)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details