Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,678
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 8,691

Image ID Title
CVE-2026-111442 Cross-Site Scripting (XSS) in Backdrop CMS Core (CVE-2026-111442)
CVE-2026-77829 Cross-Site Scripting (XSS) in Cooked – Recipe Management (WordPress plugin) (CVE-2026-77829)
CVE-2026-109990 Cross-Site Scripting (XSS) in WordPress (CVE-2026-109990)
CVE-2026-109207 Cross-Site Scripting (XSS) in WordPress (CVE-2026-109207)
CVE-2026-107758 Cross-Site Scripting (XSS) in Colibri Page Builder (WordPress plugin) (CVE-2026-107758)
CVE-2026-111284 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-111284)
CVE-2026-111232 Cross-Site Scripting (XSS) in Netgate pfSense CE (CVE-2026-111232)
CVE-2026-111233 Cross-Site Scripting (XSS) in Netgate pfSense CE (CVE-2026-111233)
CVE-2026-111168 Cross-Site Scripting (XSS) in LibreDesk (CVE-2026-111168)
CVE-2026-109893 Cross-Site Scripting (XSS) in Presto Player (CVE-2026-109893)
CVE-2026-109131 The Hub collection module documentation renderer in the unified Ansible Automation Platform UI ...
CVE-2026-110375 Cross-Site Scripting (XSS) in Download Monitor (CVE-2026-110375)
CVE-2026-110878 Cross-Site Scripting (XSS) in Aureus ERP (CVE-2026-110878)
CVE-2026-106604 Cross-Site Scripting (XSS) in YITH WooCommerce Compare (CVE-2026-106604)
CVE-2026-55872 Cross-Site Scripting (XSS) in GYM One (CVE-2026-55872)
CVE-2026-104828 Cross-Site Scripting (XSS) in HtmlUnit Neko (CVE-2026-104828)
CVE-2026-110890 Cross-Site Scripting (XSS) in JetSmartFilters (CVE-2026-110890)
CVE-2026-106707 XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job...
CVE-2026-108175 Cross-Site Scripting (XSS) in MDTF (CVE-2026-108175)
CVE-2026-105065 Cross-Site Scripting (XSS) in XStore (CVE-2026-105065)
CVE-2026-97667 Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R...
CVE-2026-111096 Cross-Site Scripting (XSS) in Jetbrains Teamcity (CVE-2026-111096)
CVE-2026-111095 Cross-Site Scripting (XSS) in Jetbrains Teamcity (CVE-2026-111095)
CVE-2026-106150 Cross-Site Scripting (XSS) in Progress Kendo UI for jQuery (CVE-2026-106150)
CVE-2026-106153 Cross-Site Scripting (XSS) in Progress Kendo UI for jQuery (CVE-2026-106153)
CVE-2026-109702 Cross-Site Scripting (XSS) in Social Share Buttons (CVE-2026-109702)
CVE-2026-109685 Cross-Site Scripting (XSS) in Link Whisper Free (CVE-2026-109685)
CVE-2026-105882 Cross-Site Scripting (XSS) in ThemeGrill User Registration user-registration (CVE-2026-105882)
CVE-2026-55876 Cross-Site Scripting (XSS) in Helium (CVE-2026-55876)
CVE-2026-57568 Cross-Site Scripting (XSS) in Lychee (CVE-2026-57568)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details