Connexion Inscription
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Liées 8,783
slug: cwe-79

Explication

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Exemple
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnérabilités associées 9,070

Image ID Titre
CVE-2026-52873 XSS (Cross-Site Scripting) dans Streambert (CVE-2026-52873)
CVE-2026-21580 This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration...
CVE-2026-41921 XSS (Cross-Site Scripting) dans Koha (CVE-2026-41921)
CVE-2026-54347 XSS (Cross-Site Scripting) dans froxlor/froxlor (CVE-2026-54347)
CVE-2025-9211 XSS (Cross-Site Scripting) dans Otalio Ship Property Management System (CVE-2025-9211)
CVE-2026-52609 A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote...
CVE-2026-61696 Vulnérabilité dans Forem (CVE-2026-61696)
CVE-2026-73336 XSS (Cross-Site Scripting) dans Joomla (CVE-2026-73336)
CVE-2026-52606 A reflected cross-site scripting (XSS) vulnerability in reportico-web <= 8.1.0 allows remote...
CVE-2026-30250 XSS (Cross-Site Scripting) dans Beta Systems Software AG ANOW! Automate (CVE-2026-30250)
CVE-2026-55839 XSS (Cross-Site Scripting) dans io.kestra:kestra (CVE-2026-55839)
CVE-2026-45116 XSS (Cross-Site Scripting) dans MyBB (CVE-2026-45116)
CVE-2026-45115 XSS (Cross-Site Scripting) dans MyBB (CVE-2026-45115)
CVE-2026-73393 XSS (Cross-Site Scripting) dans Subscribe2 (CVE-2026-73393)
CVE-2026-73382 XSS (Cross-Site Scripting) dans Site Reviews (CVE-2026-73382)
CVE-2026-73190 Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.
CVE-2026-73342 XSS (Cross-Site Scripting) dans WP Multilang (CVE-2026-73342)
CVE-2026-73338 XSS (Cross-Site Scripting) dans Autopay (CVE-2026-73338)
CVE-2026-73358 XSS (Cross-Site Scripting) dans Affiliates Manager (CVE-2026-73358)
CVE-2026-73361 Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4...
CVE-2026-73359 Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4...
CVE-2026-73351 XSS (Cross-Site Scripting) dans WordPress Social Login (CVE-2026-73351)
CVE-2026-73360 XSS (Cross-Site Scripting) dans Chaty Pro (CVE-2026-73360)
CVE-2026-73375 Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions.
CVE-2026-73362 XSS (Cross-Site Scripting) dans URL Shortify (CVE-2026-73362)
CVE-2026-73378 Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions.
CVE-2026-66639 Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0...
CVE-2026-66633 Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.
CVE-2026-66636 XSS (Cross-Site Scripting) dans Wise Chat (CVE-2026-66636)
CVE-2026-66621 XSS (Cross-Site Scripting) dans Ultimate Dashboard (CVE-2026-66621)

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus