Cwe 79

🧬 CWE Liées 8,692

slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。対策はWebの基本中の基本: 出力時のHTMLエスケープです。

📌 Exemple

MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。

🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnérabilités associées 8,728

ID	Titre	Gravité	Détecté
CVE-2026-103344	XSS (Cross-Site Scripting) dans Unlimited Elements For Elementor (CVE-2026-103344)	High	il y a 1 semaine
CVE-2026-103354	XSS (Cross-Site Scripting) dans Gutenberg Blocks by Kadence Blocks (CVE-2026-103354)	High	il y a 1 semaine
CVE-2026-103062	XSS (Cross-Site Scripting) dans TranslatePress (CVE-2026-103062)	High	il y a 1 semaine
CVE-2026-17005	XSS (Cross-Site Scripting) dans Horizontal scrolling announcements (WordPress plugin) (CVE-2026-17005)	Medium	il y a 1 semaine
CVE-2026-104119	XSS (Cross-Site Scripting) dans Simple Shopping Cart (WordPress plugin) (CVE-2026-104119)	Low	il y a 1 semaine
CVE-2026-105099	XSS (Cross-Site Scripting) dans Omega Solution CoinEx Crypto (CVE-2026-105099)	Low	il y a 1 semaine
CVE-2026-105124	W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that...	Medium	il y a 2 semaines
CVE-2026-103342	XSS (Cross-Site Scripting) dans Unlimited Elements For Elementor (CVE-2026-103342)	High	il y a 2 semaines
CVE-2026-105116	XSS (Cross-Site Scripting) dans OpenAM (CVE-2026-105116)	Medium	il y a 2 semaines
CVE-2026-105114	XSS (Cross-Site Scripting) dans OpenAM (CVE-2026-105114)	Medium	il y a 2 semaines
CVE-2026-20309	XSS (Cross-Site Scripting) dans Cisco Identity Services Engine (CVE-2026-20309)	Medium	il y a 2 semaines
CVE-2026-84942	XSS (Cross-Site Scripting) dans Amazon OpenSearch Dashboards (CVE-2026-84942)	High	il y a 2 semaines
CVE-2026-84409	The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP...	High	il y a 2 semaines
CVE-2026-90443	A web interface reflects a portion of the request URL into a script context and a hyperlink...	Medium	il y a 2 semaines
CVE-2026-88020	XSS (Cross-Site Scripting) dans Autonomy Logic OpenPLC (CVE-2026-88020)	Medium	il y a 2 semaines
CVE-2026-92767	XSS (Cross-Site Scripting) dans Twenty20 Image Before-After (WordPress plugin) (CVE-2026-92767)	Medium	il y a 2 semaines
CVE-2026-97660	XSS (Cross-Site Scripting) dans WPC Product Options for WooCommerce (WordPress plugin) (CVE-2026-97660)	High	il y a 2 semaines
CVE-2026-93889	XSS (Cross-Site Scripting) dans Mail logging – WP Mail Catcher (WordPress plugin) (CVE-2026-93889)	High	il y a 2 semaines
CVE-2026-93896	XSS (Cross-Site Scripting) dans WPFront Notification Bar (WordPress plugin) (CVE-2026-93896)	Medium	il y a 2 semaines
CVE-2026-92974	XSS (Cross-Site Scripting) dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (WordPress plugin) (CVE-2026-92974)	Medium	il y a 2 semaines
CVE-2026-104313	XSS (Cross-Site Scripting) dans WPC Estimated Delivery Date for WooCommerce (WordPress plugin) (CVE-2026-104313)	Medium	il y a 2 semaines
CVE-2026-15795	XSS (Cross-Site Scripting) dans Responsive Plus – Elementor Templates & Starter Sites (WordPress plugin) (CVE-2026-15795)	Medium	il y a 2 semaines
CVE-2026-103421	XSS (Cross-Site Scripting) dans WPMobile.App – Android and iOS App Builder (WordPress plugin) (CVE-2026-103421)	Medium	il y a 2 semaines
CVE-2026-97341	XSS (Cross-Site Scripting) dans Visitor Traffic Real Time Statistics (WordPress plugin) (CVE-2026-97341)	High	il y a 2 semaines
CVE-2026-97344	XSS (Cross-Site Scripting) dans Wp Social Login and Register Social Counter (WordPress plugin) (CVE-2026-97344)	Medium	il y a 2 semaines
CVE-2026-96650	XSS (Cross-Site Scripting) dans Strong Testimonials (WordPress plugin) (CVE-2026-96650)	High	il y a 2 semaines
CVE-2026-94239	XSS (Cross-Site Scripting) dans Loco Translate (WordPress plugin) (CVE-2026-94239)	Medium	il y a 2 semaines
CVE-2026-96564	XSS (Cross-Site Scripting) dans SEOPress – AI SEO Plugin & On-site SEO (WordPress plugin) (CVE-2026-96564)	High	il y a 2 semaines
CVE-2026-96575	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-96575)	High	il y a 2 semaines
CVE-2026-93430	XSS (Cross-Site Scripting) dans GD Rating System (WordPress plugin) (CVE-2026-93430)	High	il y a 2 semaines