Cwe 79

🧬 CWE Liées 8,692

slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。対策はWebの基本中の基本: 出力時のHTMLエスケープです。

📌 Exemple

MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。

🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnérabilités associées 8,773

ID	Titre	Gravité	Détecté
CVE-2026-68528	XSS (Cross-Site Scripting) dans Concrete CMS RSS Displayer block below (CVE-2026-68528)		il y a 1 mois
CVE-2026-89256	XSS (Cross-Site Scripting) dans Bookmark plugin (CVE-2026-89256)	High	il y a 1 mois
CVE-2026-89254	XSS (Cross-Site Scripting) dans CustomizeUser plugin (CVE-2026-89254)	High	il y a 1 mois
CVE-2026-89255	XSS (Cross-Site Scripting) dans LoginControl plugin (CVE-2026-89255)	High	il y a 1 mois
CVE-2026-89253	WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site...	High	il y a 1 mois
CVE-2026-89249	XSS (Cross-Site Scripting) dans YPTWallet plugin (CVE-2026-89249)	High	il y a 1 mois
CVE-2026-89244	WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...	Medium	il y a 1 mois
CVE-2026-89241	WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...	Medium	il y a 1 mois
CVE-2026-89243	XSS (Cross-Site Scripting) dans UserGroups::setGroup_name (CVE-2026-89243)	High	il y a 1 mois
CVE-2026-89239	WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...	Medium	il y a 1 mois
CVE-2026-89240	WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a reflected cross...	Medium	il y a 1 mois
CVE-2026-17037	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-17037)	High	il y a 1 mois
CVE-2026-6642	XSS (Cross-Site Scripting) dans Media Library Assistant (WordPress plugin) (CVE-2026-6642)	Medium	il y a 1 mois
CVE-2026-6641	XSS (Cross-Site Scripting) dans Media Library Assistant (WordPress plugin) (CVE-2026-6641)	Medium	il y a 1 mois
CVE-2026-6640	XSS (Cross-Site Scripting) dans Media Library Assistant (WordPress plugin) (CVE-2026-6640)	Medium	il y a 1 mois
CVE-2026-83546	XSS (Cross-Site Scripting) dans CoolClock (WordPress plugin) (CVE-2026-83546)	Medium	il y a 1 mois
CVE-2026-85678	XSS (Cross-Site Scripting) dans AI Builder (WordPress plugin) (CVE-2026-85678)	Medium	il y a 1 mois
CVE-2026-86780	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-86780)	Medium	il y a 1 mois
CVE-2026-85677	XSS (Cross-Site Scripting) dans Gutenverse News (WordPress plugin) (CVE-2026-85677)	High	il y a 1 mois
CVE-2026-83545	XSS (Cross-Site Scripting) dans CoolClock (WordPress plugin) (CVE-2026-83545)	Medium	il y a 1 mois
CVE-2026-14565	XSS (Cross-Site Scripting) dans advanced-customized-prompts (WordPress plugin) (CVE-2026-14565)	Medium	il y a 1 mois
CVE-2025-15695	XSS (Cross-Site Scripting) dans WordPress (CVE-2025-15695)	Low	il y a 1 mois
CVE-2026-84960	XSS (Cross-Site Scripting) dans WP-Members Membership Plugin (WordPress plugin) (CVE-2026-84960)	Medium	il y a 1 mois
CVE-2026-81754	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-81754)	High	il y a 1 mois
CVE-2026-81825	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-81825)	High	il y a 1 mois
CVE-2026-7438	XSS (Cross-Site Scripting) dans Bold Timeline Lite (WordPress plugin) (CVE-2026-7438)	Medium	il y a 1 mois
CVE-2026-78172	XSS (Cross-Site Scripting) dans Themify – WooCommerce Product Filter (WordPress plugin) (CVE-2026-78172)	Medium	il y a 1 mois
CVE-2026-77150	XSS (Cross-Site Scripting) dans Unlimited Elements For Elementor (WordPress plugin) (CVE-2026-77150)	Medium	il y a 1 mois
CVE-2026-19985	XSS (Cross-Site Scripting) dans Relevanssi – A Better Search (WordPress plugin) (CVE-2026-19985)	Medium	il y a 1 mois
CVE-2026-18562	XSS (Cross-Site Scripting) dans HUSKY – Products Filter Professional for WooCommerce (WordPress plugin) (CVE-2026-18562)	Medium	il y a 1 mois