Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,766

Image ID Title
CVE-2026-90567 Cross-Site Scripting (XSS) in quequnlong shiyi-blog (CVE-2026-90567)
CVE-2026-90564 Cross-Site Scripting (XSS) in quequnlong shiyi-blog (CVE-2026-90564)
CVE-2026-90528 Cross-Site Scripting (XSS) in TDuckApp tduck-platform (CVE-2026-90528)
CVE-2026-90527 Cross-Site Scripting (XSS) in quequnlong shiyi-blog (CVE-2026-90527)
CVE-2026-90563 Cross-Site Scripting (XSS) in maliangnansheng bbs-springboot (CVE-2026-90563)
CVE-2026-90529 Cross-Site Scripting (XSS) in DataEase (CVE-2026-90529)
CVE-2026-90772 Cross-Site Scripting (XSS) in Amundsen frontend (CVE-2026-90772)
CVE-2026-90561 Cross-Site Scripting (XSS) in Strapi (CVE-2026-90561)
CVE-2026-90502 Cross-Site Scripting (XSS) in stilleshan ServerStatus (CVE-2026-90502)
CVE-2026-90497 Cross-Site Scripting (XSS) in Fengoffice Feng Office (CVE-2026-90497)
CVE-2026-90489 Cross-Site Scripting (XSS) in Xuxueli xxl-job (CVE-2026-90489)
CVE-2026-10148 Cross-Site Scripting (XSS) in Booking for Appointments and Events Calendar (WordPress plugin) (CVE-2026-10148)
CVE-2026-86790 Cross-Site Scripting (XSS) in WP Highlight Box (WordPress plugin) (CVE-2026-86790)
CVE-2026-87888 Cross-Site Scripting (XSS) in YayPricing (WordPress plugin) (CVE-2026-87888)
CVE-2026-82847 Cross-Site Scripting (XSS) in Masteriyo LMS (WordPress plugin) (CVE-2026-82847)
CVE-2026-83532 Cross-Site Scripting (XSS) in Custom Menu Wizard Widget (WordPress plugin) (CVE-2026-83532)
CVE-2026-81429 Cross-Site Scripting (XSS) in Export & Import WPBakery Page Builder (WordPress plugin) (CVE-2026-81429)
CVE-2026-81742 Cross-Site Scripting (XSS) in BE REST Endpoints (WordPress plugin) (CVE-2026-81742)
CVE-2026-89268 Cross-Site Scripting (XSS) in QloApps (CVE-2026-89268)
CVE-2026-81918 Cross-Site Scripting (XSS) in Concrete CMS below (CVE-2026-81918)
CVE-2026-81917 Cross-Site Scripting (XSS) in Concrete CMS below (CVE-2026-81917)
CVE-2026-54165 Cross-Site Scripting (XSS) in Dobase (CVE-2026-54165)
CVE-2026-81911 Cross-Site Scripting (XSS) in Concrete CMS (CVE-2026-81911)
CVE-2026-79035 Cross-Site Scripting (XSS) in Zeta Marketing Platform (ZMP) (CVE-2026-79035)
CVE-2026-77490 Cross-Site Scripting (XSS) in Microsoft Edge (CVE-2026-77490)
CVE-2026-62138 Cross-Site Scripting (XSS) in Visual Composer Website Builder (CVE-2026-62138)
CVE-2026-62110 Cross-Site Scripting (XSS) in Bold Page Builder (CVE-2026-62110)
CVE-2026-62111 Cross-Site Scripting (XSS) in Simple Payment (CVE-2026-62111)
CVE-2026-82535 Cross-Site Scripting (XSS) in Chamilo LMS (CVE-2026-82535)
CVE-2026-7298 Cross-Site Scripting (XSS) in Smart E-Commerce (CVE-2026-7298)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details