Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,773

Image ID Title
CVE-2026-2390 Cross-Site Scripting (XSS) in Powerkit (WordPress plugin) (CVE-2026-2390)
CVE-2026-86294 Cross-Site Scripting (XSS) in SourceCodester Simple Traffic Offense System (CVE-2026-86294)
CVE-2026-86278 A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination...
CVE-2026-86264 Cross-Site Scripting (XSS) in sfturing ssm_pro (CVE-2026-86264)
CVE-2026-86244 Cross-Site Scripting (XSS) in FastAdmin (CVE-2026-86244)
CVE-2026-86238 Cross-Site Scripting (XSS) in projectworlds Online Examination System (CVE-2026-86238)
CVE-2026-86226 Cross-Site Scripting (XSS) in Projectwolds Online Attendance System (CVE-2026-86226)
CVE-2026-86216 Cross-Site Scripting (XSS) in PHP (CVE-2026-86216)
CVE-2026-86181 Cross-Site Scripting (XSS) in code-projects Task Management System (CVE-2026-86181)
CVE-2026-84219 Cross-Site Scripting (XSS) in Kirki (WordPress plugin) (CVE-2026-84219)
CVE-2026-84028 Cross-Site Scripting (XSS) in Bold Page Builder (WordPress plugin) (CVE-2026-84028)
CVE-2026-86197 Cross-Site Scripting (XSS) in Grav (CVE-2026-86197)
CVE-2026-86188 AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing...
CVE-2026-76573 Cross-Site Scripting (XSS) in Pods – Custom Content Types and Fields (WordPress plugin) (CVE-2026-76573)
CVE-2026-75586 Cross-Site Scripting (XSS) in Unlimited Elements For Elementor (WordPress plugin) (CVE-2026-75586)
CVE-2026-85414 Cross-Site Scripting (XSS) in Gallery : FooGallery (WordPress plugin) (CVE-2026-85414)
CVE-2026-83625 Cross-Site Scripting (XSS) in Contact Form by Supsystic (WordPress plugin) (CVE-2026-83625)
CVE-2026-84899 Cross-Site Scripting (XSS) in VikWidgetsLoader (WordPress plugin) (CVE-2026-84899)
CVE-2026-84930 Cross-Site Scripting (XSS) in CatFolders Document Gallery & PDF Library (WordPress plugin) (CVE-2026-84930)
CVE-2026-84934 Cross-Site Scripting (XSS) in JCH Optimize (WordPress plugin) (CVE-2026-84934)
CVE-2026-84931 Cross-Site Scripting (XSS) in Joli Table Of Contents (WordPress plugin) (CVE-2026-84931)
CVE-2026-84935 Cross-Site Scripting (XSS) in HT Menu (WordPress plugin) (CVE-2026-84935)
CVE-2026-83544 Cross-Site Scripting (XSS) in Greenshift (WordPress plugin) (CVE-2026-83544)
CVE-2026-82846 Cross-Site Scripting (XSS) in Masteriyo LMS (WordPress plugin) (CVE-2026-82846)
CVE-2026-84021 Cross-Site Scripting (XSS) in Bold Page Builder (WordPress plugin) (CVE-2026-84021)
CVE-2026-84022 Cross-Site Scripting (XSS) in Bold Page Builder (WordPress plugin) (CVE-2026-84022)
CVE-2026-84896 Cross-Site Scripting (XSS) in King Addons for Elementor (WordPress plugin) (CVE-2026-84896)
CVE-2026-81404 Cross-Site Scripting (XSS) in IPGP Visitors Origin (WordPress plugin) (CVE-2026-81404)
CVE-2026-78438 Cross-Site Scripting (XSS) in W3 Total Cache (WordPress plugin) (CVE-2026-78438)
CVE-2026-77830 Cross-Site Scripting (XSS) in Spam protection, Honeypot, Anti-Spam by CleanTalk (WordPress plugin) (CVE-2026-77830)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details