Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,692
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnérabilités associées 8,728

Image ID Titre
CVE-2026-59671 XSS (Cross-Site Scripting) dans Repasat application (CVE-2026-59671)
CVE-2026-59669 XSS (Cross-Site Scripting) dans Repasat application (CVE-2026-59669)
CVE-2026-97663 XSS (Cross-Site Scripting) dans Customer Reviews for WooCommerce (WordPress plugin) (CVE-2026-97663)
CVE-2026-97342 XSS (Cross-Site Scripting) dans JetFormBuilder — Dynamic Blocks Form Builder (WordPress plugin) (CVE-2026-97342)
CVE-2026-97641 XSS (Cross-Site Scripting) dans Relevanssi – A Better Search (WordPress plugin) (CVE-2026-97641)
CVE-2026-97338 XSS (Cross-Site Scripting) dans Download Manager (WordPress plugin) (CVE-2026-97338)
CVE-2026-97336 XSS (Cross-Site Scripting) dans CMB2 (WordPress plugin) (CVE-2026-97336)
CVE-2026-96871 XSS (Cross-Site Scripting) dans Mang Board (WordPress plugin) (CVE-2026-96871)
CVE-2026-96567 XSS (Cross-Site Scripting) dans MW WP Form (WordPress plugin) (CVE-2026-96567)
CVE-2026-96578 XSS (Cross-Site Scripting) dans GSpeech TTS – WordPress Text To Speech Plugin (WordPress plugin) (CVE-2026-96578)
CVE-2026-96566 XSS (Cross-Site Scripting) dans Newsletter – Send awesome emails from (WordPress plugin) (CVE-2026-96566)
CVE-2026-96647 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-96647)
CVE-2026-93756 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-93756)
CVE-2026-93880 XSS (Cross-Site Scripting) dans Greenshift – animation and page builder blocks (WordPress plugin) (CVE-2026-93880)
CVE-2026-95817 XSS (Cross-Site Scripting) dans DoFollow Case by Case (WordPress plugin) (CVE-2026-95817)
CVE-2026-95670 XSS (Cross-Site Scripting) dans No External Links (WordPress plugin) (CVE-2026-95670)
CVE-2026-103426 XSS (Cross-Site Scripting) dans Relevanssi Premium (WordPress plugin) (CVE-2026-103426)
CVE-2026-102772 XSS (Cross-Site Scripting) dans CMB2 (WordPress plugin) (CVE-2026-102772)
CVE-2026-100182 XSS (Cross-Site Scripting) dans Download Monitor (WordPress plugin) (CVE-2026-100182)
CVE-2026-100107 XSS (Cross-Site Scripting) dans Kubio AI Page Builder (WordPress plugin) (CVE-2026-100107)
CVE-2026-93029 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts...
CVE-2026-93697 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify...
CVE-2026-1661 XSS (Cross-Site Scripting) dans WP Mail Logging (WordPress plugin) (CVE-2026-1661)
CVE-2026-102565 XSS (Cross-Site Scripting) dans BA Book Everything (WordPress plugin) (CVE-2026-102565)
CVE-2026-91022 XSS (Cross-Site Scripting) dans Motors (WordPress plugin) (CVE-2026-91022)
CVE-2026-90438 XSS (Cross-Site Scripting) dans WordPress (CVE-2026-90438)
CVE-2026-84925 XSS (Cross-Site Scripting) dans Avada | Website Builder For WordPress & WooCommerce (WordPress theme) (CVE-2026-84925)
CVE-2026-78471 XSS (Cross-Site Scripting) dans Autoptimize (WordPress plugin) (CVE-2026-78471)
CVE-2026-85016 XSS (Cross-Site Scripting) dans Unlimited Elements for Elementor (WordPress plugin) (CVE-2026-85016)
CVE-2026-13718 XSS (Cross-Site Scripting) dans Tabs Responsive (WordPress plugin) (CVE-2026-13718)

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus