Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,678
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnérabilités associées 8,691

Image ID Titre
CVE-2026-62064 XSS (Cross-Site Scripting) dans Ambed (CVE-2026-62064)
CVE-2026-62034 Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison...
CVE-2026-62037 XSS (Cross-Site Scripting) dans Document Embedder (CVE-2026-62037)
CVE-2026-57742 XSS (Cross-Site Scripting) dans Kids Planet (CVE-2026-57742)
CVE-2026-62027 XSS (Cross-Site Scripting) dans Team Section Block (CVE-2026-62027)
CVE-2026-42715 Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVE-2026-42711 Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
CVE-2026-42709 Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for...
CVE-2026-42697 Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5...
CVE-2026-42693 XSS (Cross-Site Scripting) dans Jannah (CVE-2026-42693)
CVE-2026-42702 XSS (Cross-Site Scripting) dans Tutor LMS (CVE-2026-42702)
CVE-2026-42699 Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVE-2026-40803 Unauthenticated Cross Site Scripting (XSS) in Jotform &#8211; AI Chatbot <= 3.8.2 versions.
CVE-2026-42631 XSS (Cross-Site Scripting) dans Qode Music (CVE-2026-42631)
CVE-2026-42632 XSS (Cross-Site Scripting) dans Qode Real Estate (CVE-2026-42632)
CVE-2026-39799 XSS (Cross-Site Scripting) dans WP File Download (CVE-2026-39799)
CVE-2026-39800 Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24...
CVE-2026-57806 XSS (Cross-Site Scripting) dans Martfury - WooCommerce Marketplace WordPress Theme (CVE-2026-57806)
CVE-2026-94160 XSS (Cross-Site Scripting) dans ThemeStek Extras for LabtechCO Theme (CVE-2026-94160)
CVE-2026-97264 XSS (Cross-Site Scripting) dans WPAdverts (CVE-2026-97264)
CVE-2026-97263 XSS (Cross-Site Scripting) dans WPAdverts (CVE-2026-97263)
CVE-2026-102388 XSS (Cross-Site Scripting) dans Forminator (CVE-2026-102388)
CVE-2026-107657 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-107657)
CVE-2026-4791 XSS (Cross-Site Scripting) dans PeproDev Ultimate Profile Solutions (WordPress plugin) (CVE-2026-4791)
CVE-2026-97396 XSS (Cross-Site Scripting) dans Email Marketing for WordPress and WooCommerce – Retainful (WordPress plugin) (CVE-2026-97396)
CVE-2026-96765 XSS (Cross-Site Scripting) dans WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WordPress plugin) (CVE-2026-96765)
CVE-2026-97340 XSS (Cross-Site Scripting) dans Avada | Website Builder For WordPress & WooCommerce (WordPress theme) (CVE-2026-97340)
CVE-2026-96563 XSS (Cross-Site Scripting) dans Motors – Car Dealership & Classified Listings Plugin (WordPress plugin) (CVE-2026-96563)
CVE-2026-93951 XSS (Cross-Site Scripting) dans Zeinet (CVE-2026-93951)
CVE-2026-96278 XSS (Cross-Site Scripting) dans WP Photo Album Plus (WordPress plugin) (CVE-2026-96278)

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus