Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,734

Image ID Title
CVE-2026-90918 Cross-Site Scripting (XSS) in Joomla (CVE-2026-90918)
CVE-2026-90914 Cross-Site Scripting (XSS) in Joomla (CVE-2026-90914)
CVE-2026-90906 Cross-Site Scripting (XSS) in Joomla (CVE-2026-90906)
CVE-2026-101127 Cross-Site Scripting (XSS) in Balbooa (CVE-2026-101127)
CVE-2026-100245 Cross-Site Scripting (XSS) in Mediawiki - Wikibase Extension (CVE-2026-100245)
CVE-2026-100243 Cross-Site Scripting (XSS) in Mediawiki - WikiSEO Extension (CVE-2026-100243)
CVE-2026-100238 Cross-Site Scripting (XSS) in Mediawiki - Flow Extension (CVE-2026-100238)
CVE-2026-97711 Cross-Site Scripting (XSS) in serialize-javascript (CVE-2026-97711)
CVE-2026-49243 Cross-Site Scripting (XSS) in Webmin (CVE-2026-49243)
CVE-2026-101270 Malicious HTML content could be injected into the help texts of various fields with organizer...
CVE-2026-84739 Cross-Site Scripting (XSS) in Gitlab (CVE-2026-84739)
CVE-2026-76718 Cross-Site Scripting (XSS) in HPE OneView (CVE-2026-76718)
CVE-2026-76719 Cross-Site Scripting (XSS) in HPE OneView (CVE-2026-76719)
CVE-2026-102292 Cross-Site Scripting (XSS) in coolbeans1212 MateisHomePage-Website (CVE-2026-102292)
CVE-2026-102290 Cross-Site Scripting (XSS) in CodeCanyon Rocket LMS (CVE-2026-102290)
CVE-2026-102264 Cross-Site Scripting (XSS) in mwasikz robo-cafe-rms (CVE-2026-102264)
CVE-2026-96326 Cross-Site Scripting (XSS) in WordPress (CVE-2026-96326)
CVE-2026-102374 Cross-Site Scripting (XSS) in GestSup (CVE-2026-102374)
CVE-2026-102372 Cross-Site Scripting (XSS) in GestSup (CVE-2026-102372)
CVE-2026-102333 Cross-Site Scripting (XSS) in httpdbg (CVE-2026-102333)
CVE-2026-101141 Cross-Site Scripting (XSS) in Eleveo Call Recording Software (CVE-2026-101141)
CVE-2026-101109 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Manager (Free) < 6.5...
CVE-2026-101111 Cross-Site Scripting (XSS) in Ordasoft (CVE-2026-101111)
CVE-2026-100753 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate Manager (Free) <...
CVE-2026-88804 Cross-Site Scripting (XSS) in SUSE Rancher (CVE-2026-88804)
CVE-2026-73641 Cross-Site Scripting (XSS) in Dayforce Payroll (CVE-2026-73641)
CVE-2026-82326 Cross-Site Scripting (XSS) in Enocta Platform (CVE-2026-82326)
CVE-2026-87752 Cross-Site Scripting (XSS) in Agentis (CVE-2026-87752)
CVE-2026-7170 Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: ...
CVE-2026-7172 Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: ...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details