Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,783
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnérabilités associées 9,131

Image ID Titre
CVE-2026-52702 XSS (Cross-Site Scripting) dans SEO Redirection (CVE-2026-52702)
CVE-2026-48966 Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.
CVE-2026-49055 Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7...
CVE-2026-48870 Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions.
CVE-2026-48867 XSS (Cross-Site Scripting) dans Quiz And Survey Master (CVE-2026-48867)
CVE-2026-48876 XSS (Cross-Site Scripting) dans Stop Spammers (CVE-2026-48876)
CVE-2026-48838 XSS (Cross-Site Scripting) dans Post SMTP (CVE-2026-48838)
CVE-2026-48871 XSS (Cross-Site Scripting) dans MW WP Form (CVE-2026-48871)
CVE-2026-48885 XSS (Cross-Site Scripting) dans HollerBox (CVE-2026-48885)
CVE-2026-48880 XSS (Cross-Site Scripting) dans WP Job Portal (CVE-2026-48880)
CVE-2026-42663 XSS (Cross-Site Scripting) dans Simple Membership (CVE-2026-42663)
CVE-2026-42656 XSS (Cross-Site Scripting) dans Contest Gallery (CVE-2026-42656)
CVE-2026-42658 XSS (Cross-Site Scripting) dans Classified Listing (CVE-2026-42658)
CVE-2026-42650 XSS (Cross-Site Scripting) dans AutomatorWP (CVE-2026-42650)
CVE-2026-42649 XSS (Cross-Site Scripting) dans Favicon Rotator (CVE-2026-42649)
CVE-2026-42686 XSS (Cross-Site Scripting) dans EventPrime (CVE-2026-42686)
CVE-2026-42775 XSS (Cross-Site Scripting) dans AutomatorWP (CVE-2026-42775)
CVE-2026-42688 XSS (Cross-Site Scripting) dans Modula Image Gallery (CVE-2026-42688)
CVE-2026-45437 Unauthenticated Cross Site Scripting (XSS) in Product Filter Widget for Elementor <= 1.0.6 versions.
CVE-2026-40770 XSS (Cross-Site Scripting) dans Coupon Affiliates (CVE-2026-40770)
CVE-2026-40787 XSS (Cross-Site Scripting) dans Quiz And Survey Master (CVE-2026-40787)
CVE-2026-40791 XSS (Cross-Site Scripting) dans WP Time Slots Booking Form (CVE-2026-40791)
CVE-2026-41556 XSS (Cross-Site Scripting) dans ProfilePress (CVE-2026-41556)
CVE-2026-40732 Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions.
CVE-2026-39540 Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions.
CVE-2026-39463 XSS (Cross-Site Scripting) dans ManageWP Worker (CVE-2026-39463)
CVE-2026-39491 XSS (Cross-Site Scripting) dans JupiterX Core (CVE-2026-39491)
CVE-2026-39447 XSS (Cross-Site Scripting) dans Simply Schedule Appointments (CVE-2026-39447)
CVE-2026-39451 XSS (Cross-Site Scripting) dans WP Google Review Slider (CVE-2026-39451)
CVE-2026-39449 Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions.

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus