Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,783
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894188 Cwe 8624077 Cwe 2844037 Cwe 4163898 Cwe 1193186 Cwe 2003160 Cwe 1253129 Cwe 202861 Cwe 222781 Cwe 7872527 Cwe 782043 Cwe 941886 Cwe 8631885 Cwe 741810 Cwe 1221802

🛡 Vulnerabilities tagged with this 8,783

Image ID Title
CVE-2026-85599 Cross-Site Scripting (XSS) in Grav Shortcode Core (CVE-2026-85599)
CVE-2026-85600 Cross-Site Scripting (XSS) in Grav Admin (CVE-2026-85600)
CVE-2026-85598 Cross-Site Scripting (XSS) in Grav (CVE-2026-85598)
CVE-2026-85601 Cross-Site Scripting (XSS) in Grav Admin (CVE-2026-85601)
CVE-2026-85593 Cross-Site Scripting (XSS) in phpMyFAQ (CVE-2026-85593)
CVE-2026-85577 AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in...
CVE-2026-18957 Cross-Site Scripting (XSS) in Menulux Portal (CVE-2026-18957)
CVE-2026-85541 DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability....
CVE-2026-27086 Cross-Site Scripting (XSS) in WoodMart (CVE-2026-27086)
CVE-2026-80190 Cross-Site Scripting (XSS) in Apache (CVE-2026-80190)
CVE-2026-85229 Cross-Site Scripting (XSS) in Apache (CVE-2026-85229)
CVE-2026-80180 Cross-Site Scripting (XSS) in Apache (CVE-2026-80180)
CVE-2026-85405 Cross-Site Scripting (XSS) in Eleveo Call Recording Software (CVE-2026-85405)
CVE-2026-85406 Cross-Site Scripting (XSS) in Eleveo Quality Management (CVE-2026-85406)
CVE-2026-85382 Cross-Site Scripting (XSS) in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d (CVE-2026-85382)
CVE-2026-85453 Cross-Site Scripting (XSS) in MOOS core-moos (CVE-2026-85453)
CVE-2026-85061 Cross-Site Scripting (XSS) in maplibre-gl (CVE-2026-85061)
CVE-2026-85207 Cross-Site Scripting (XSS) in itsourcecode Online Medicine Delivery System (CVE-2026-85207)
CVE-2026-82024 Cross-Site Scripting (XSS) in LearnPress WordPress Plugin (CVE-2026-82024)
CVE-2026-85303 Cross-Site Scripting (XSS) in Booking and Rental Manager (CVE-2026-85303)
CVE-2026-85302 Cross-Site Scripting (XSS) in WordPress WPKoi Templates for Elementor (CVE-2026-85302)
CVE-2026-84812 Cross-Site Scripting (XSS) in BP Better Messages (CVE-2026-84812)
CVE-2026-84848 Cross-Site Scripting (XSS) in Quick Event Manager (CVE-2026-84848)
CVE-2026-84774 Cross-Site Scripting (XSS) in WP Statistics (CVE-2026-84774)
CVE-2026-84773 Cross-Site Scripting (XSS) in EWWW Image Optimizer (CVE-2026-84773)
CVE-2026-84763 Cross-Site Scripting (XSS) in RTMKit (CVE-2026-84763)
CVE-2026-84765 Cross-Site Scripting (XSS) in Breadcrumb NavXT (CVE-2026-84765)
CVE-2026-81292 Cross-Site Scripting (XSS) in Simple Payment (CVE-2026-81292)
CVE-2026-81282 Subscriber Cross Site Scripting (XSS) in Product Variations Swatches for WooCommerce <= 1.1.18...
CVE-2026-81295 Cross-Site Scripting (XSS) in Under Construction (CVE-2026-81295)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details