Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,692

Image ID Title
CVE-2026-104083 SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that...
CVE-2026-94066 Cross-Site Scripting (XSS) in Pond (CVE-2026-94066)
CVE-2026-94063 Cross-Site Scripting (XSS) in Education Center (CVE-2026-94063)
CVE-2026-92085 Cross-Site Scripting (XSS) in Talassoft Industrial Management Software (CVE-2026-92085)
CVE-2026-79363 Cross-Site Scripting (XSS) in Cloudron (CVE-2026-79363)
CVE-2026-94061 Cross-Site Scripting (XSS) in Whistle - Sports Club (CVE-2026-94061)
CVE-2026-94059 Cross-Site Scripting (XSS) in Ogency (CVE-2026-94059)
CVE-2026-94060 Cross-Site Scripting (XSS) in Voldor (CVE-2026-94060)
CVE-2026-94058 Cross-Site Scripting (XSS) in Treck (CVE-2026-94058)
CVE-2026-62029 Cross-Site Scripting (XSS) in WPFunnels (CVE-2026-62029)
CVE-2026-105318 Cross-Site Scripting (XSS) in AcyMailing SMTP Newsletter (CVE-2026-105318)
CVE-2026-105870 Cross-Site Scripting (XSS) in WP Associate Post R2 (CVE-2026-105870)
CVE-2026-62039 Cross-Site Scripting (XSS) in Html5 Audio Player (CVE-2026-62039)
CVE-2026-96553 Cross-Site Scripting (XSS) in FiboSearch (CVE-2026-96553)
CVE-2026-96607 Cross-Site Scripting (XSS) in NEX-Forms (CVE-2026-96607)
CVE-2026-96761 Cross-Site Scripting (XSS) in Welcart e-Commerce (CVE-2026-96761)
CVE-2026-96332 Cross-Site Scripting (XSS) in Simple Payment (CVE-2026-96332)
CVE-2026-95608 Cross-Site Scripting (XSS) in HUSKY (CVE-2026-95608)
CVE-2026-95609 Cross-Site Scripting (XSS) in Media LIbrary Assistant (CVE-2026-95609)
CVE-2026-95596 Cross-Site Scripting (XSS) in ShopBuilder – Elementor WooCommerce Builder Addons (CVE-2026-95596)
CVE-2026-95591 Cross-Site Scripting (XSS) in VikBooking Hotel Booking Engine & PMS (CVE-2026-95591)
CVE-2026-95598 Cross-Site Scripting (XSS) in Place search-in-place (CVE-2026-95598)
CVE-2026-94667 Cross-Site Scripting (XSS) in JetReviews (CVE-2026-94667)
CVE-2026-94668 Cross-Site Scripting (XSS) in Salon booking system (CVE-2026-94668)
CVE-2026-94641 Cross-Site Scripting (XSS) in UsersWP (CVE-2026-94641)
CVE-2026-94665 Cross-Site Scripting (XSS) in Classified Listing (CVE-2026-94665)
CVE-2026-94661 Cross-Site Scripting (XSS) in JetBlog (CVE-2026-94661)
CVE-2026-94167 Cross-Site Scripting (XSS) in Kubio AI Page Builder (CVE-2026-94167)
CVE-2026-94166 Cross-Site Scripting (XSS) in UpSolution Core (CVE-2026-94166)
CVE-2026-94415 Cross-Site Scripting (XSS) in Betheme (CVE-2026-94415)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details