Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 9,073

Image ID Title
CVE-2026-65527 Cross-Site Scripting (XSS) in LIQUID SPEECH BALLOON (CVE-2026-65527)
CVE-2026-65522 Cross-Site Scripting (XSS) in WordPress (CVE-2026-65522)
CVE-2026-65514 Cross-Site Scripting (XSS) in Appointment Hour Booking (CVE-2026-65514)
CVE-2026-65518 Contributor Cross Site Scripting (XSS) in Accept Donations with PayPal & Stripe <= 1.5.5 versions.
CVE-2026-65510 Cross-Site Scripting (XSS) in PeproDev Ultimate Invoice (CVE-2026-65510)
CVE-2026-65519 Cross-Site Scripting (XSS) in Photo Gallery (CVE-2026-65519)
CVE-2026-65511 Cross-Site Scripting (XSS) in WordPress (CVE-2026-65511)
CVE-2026-65492 Cross-Site Scripting (XSS) in Dokan Pro (CVE-2026-65492)
CVE-2026-65503 Cross-Site Scripting (XSS) in Ultimate Store Kit Elementor Addons (CVE-2026-65503)
CVE-2026-65480 Cross-Site Scripting (XSS) in TheGem (CVE-2026-65480)
CVE-2026-65470 Cross-Site Scripting (XSS) in Fluent Support (CVE-2026-65470)
CVE-2026-65482 Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions.
CVE-2026-65473 Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
CVE-2026-65465 Cross-Site Scripting (XSS) in JetElements For Elementor (CVE-2026-65465)
CVE-2026-65483 Cross-Site Scripting (XSS) in HashThemes Demo Importer (CVE-2026-65483)
CVE-2026-65475 Cross-Site Scripting (XSS) in Modula Image Gallery (CVE-2026-65475)
CVE-2026-61947 Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2...
CVE-2026-65449 Cross-Site Scripting (XSS) in MapSVG (CVE-2026-65449)
CVE-2026-61944 Cross-Site Scripting (XSS) in Bookly (CVE-2026-61944)
CVE-2026-64810 Cross-Site Scripting (XSS) in JetBrains IntelliJ IDEA (CVE-2026-64810)
CVE-2026-57704 Cross-Site Scripting (XSS) in Smart Manager (CVE-2026-57704)
CVE-2026-57735 Cross-Site Scripting (XSS) in Breakdance (CVE-2026-57735)
CVE-2026-59513 Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.
CVE-2026-57427 Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.
CVE-2026-59517 Cross-Site Scripting (XSS) in Easy Form Builder (CVE-2026-59517)
CVE-2026-59512 Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions.
CVE-2026-57767 Cross-Site Scripting (XSS) in WP Google Maps Pro (CVE-2026-57767)
CVE-2026-57809 Cross-Site Scripting (XSS) in AffiliateWP (CVE-2026-57809)
CVE-2026-57701 Cross-Site Scripting (XSS) in Real Estate Manager Pro (CVE-2026-57701)
CVE-2026-57699 Cross-Site Scripting (XSS) in Slider Pro (CVE-2026-57699)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details