Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 66
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 787105 Cwe 41699 Cwe 2296 Cwe 11990 Cwe 9484 Cwe 50270 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 5,214

ID Title
CVE-2026-15653 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15653)
CVE-2026-15334 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15334)
CVE-2026-15333 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15333)
CVE-2026-6454 Cross-Site Scripting (XSS) in wordpress (CVE-2026-6454)
CVE-2026-15100 Cross-Site Scripting (XSS) in wordpress (CVE-2026-15100)
CVE-2025-9205 Cross-Site Scripting (XSS) in wordpress (CVE-2025-9205)
CVE-2026-15968 Cross-Site Scripting (XSS) in progress (CVE-2026-15968)
CVE-2026-53668 Cross-Site Scripting (XSS) in react-router-dom (CVE-2026-53668)
CVE-2026-53667 Cross-Site Scripting (XSS) in react-router (CVE-2026-53667)
CVE-2026-65763 Cross-Site Scripting (XSS) in CVE-2026-65763 (CVE-2026-65763)
CVE-2026-65762 Cross-Site Scripting (XSS) in CVE-2026-65762 (CVE-2026-65762)
CVE-2026-65697 Cross-Site Scripting (XSS) in CVE-2026-65697 (CVE-2026-65697)
CVE-2026-48539 Cross-Site Scripting (XSS) in CVE-2026-48539 (CVE-2026-48539)
CVE-2026-48538 Cross-Site Scripting (XSS) in CVE-2026-48538 (CVE-2026-48538)
CVE-2026-48537 Cross-Site Scripting (XSS) in CVE-2026-48537 (CVE-2026-48537)
CVE-2026-48536 Cross-Site Scripting (XSS) in CVE-2026-48536 (CVE-2026-48536)
CVE-2026-48532 Cross-Site Scripting (XSS) in CVE-2026-48532 (CVE-2026-48532)
CVE-2026-48530 Cross-Site Scripting (XSS) in CVE-2026-48530 (CVE-2026-48530)
CVE-2026-48531 Cross-Site Scripting (XSS) in CVE-2026-48531 (CVE-2026-48531)
CVE-2026-48535 Cross-Site Scripting (XSS) in CVE-2026-48535 (CVE-2026-48535)
CVE-2026-48534 Cross-Site Scripting (XSS) in CVE-2026-48534 (CVE-2026-48534)
CVE-2026-65911 Cross-Site Scripting (XSS) in cure53 (CVE-2026-65911)
CVE-2026-65538 Author Cross Site Scripting (XSS) in Machete <= 5.2 versions.
CVE-2026-65606 Cross-Site Scripting (XSS) in CVE-2026-65606 (CVE-2026-65606)
CVE-2026-65605 Cross-Site Scripting (XSS) in CVE-2026-65605 (CVE-2026-65605)
CVE-2026-65550 Shop Manager Cross Site Scripting (XSS) in Tabs <= 2.5 versions.
CVE-2026-65527 Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.
CVE-2026-65533 Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions.
CVE-2026-65528 Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions.
CVE-2026-65534 Author Cross Site Scripting (XSS) in Custom links in Elementor Image Carousel <= 1.1.1 versions.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →