Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)

560
CRITICAL
4,909
HIGH
31,199
MEDIUM
2,399
LOW
39,637 CVEs · Page 117/793
7.1
CVE-2025-22320

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ProductDyno Produc

7.1
CVE-2025-22324

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andon Ivanov OZ Ca

7.1
CVE-2025-22326

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 5centsCDN 5centsCD

7.1
CVE-2025-22353

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bvads BVD Easy Gal

7.1
CVE-2025-22355

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asokaaso2 Kikx Sim

7.1
CVE-2025-22357

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdever Target Not

7.1
CVE-2025-22358

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simone Marcon Wp a

7.1
CVE-2025-22359

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pjfc SyncFields sy

7.1
CVE-2024-56056

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kmfoysal06 SimpleC

7.1
CVE-2025-22294

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda Custom

7.1
CVE-2025-22335

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rajib.dewan Openca

7.1
CVE-2025-22338

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lich_wang WP-tagMa

7.1
CVE-2025-22522

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in roya khosravi Sing

7.1
CVE-2025-22547

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jaykrishnang JK Ht

7.1
CVE-2025-22548

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in frankkoenen ldap_l

7.1
CVE-2025-22593

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in burria Laika Pedig

7.1
CVE-2025-22295

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tripetto WordPress

7.1
CVE-2025-22307

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saiful Islam Produ

7.1
CVE-2025-22313

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetiz

7.1
CVE-2025-22330

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG

7.1
CVE-2025-22331

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in P3JX Cf7Save Exten

7.1
CVE-2025-22345

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tsinf TS Comfort D

7.1
CVE-2025-22361

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Opentracker Opentr

7.1
CVE-2025-22521

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Farrell wp H

7.1
CVE-2025-22539

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ka2 Custom DataBas

7.1
CVE-2025-22594

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hccoder Better Use

7.1
CVE-2025-22595

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yamna Khawaja Mail

7.1
CVE-2024-56065

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team:

7.1
CVE-2024-56301

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology

7.1
CVE-2025-22314

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Scripts Food St

7.1
CVE-2025-22337

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin Ord

7.1
CVE-2025-22344

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in timmcdaniels Media

7.1
CVE-2025-22498

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N3wNormal LucidLMS

7.1
CVE-2025-22499

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FAKTOR VIER F4 Pos

7.1
CVE-2025-22506

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Smart Agenda Smart

7.1
CVE-2025-22514

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yamna Khawaja KNR

7.1
CVE-2025-22567

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in trustist TRUSTist

7.1
CVE-2025-22568

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arete-it Post And

7.1
CVE-2025-22569

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Feat

7.1
CVE-2025-22570

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mdjekic Inline Twe

7.1
CVE-2025-22576

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus Downing Sit

7.1
CVE-2025-22583

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anshulsojatia Scan

7.1
CVE-2025-22586

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dstoever WPEX Repl

7.1
CVE-2025-22588

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in intelligence_lab S

7.1
CVE-2025-22317

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gallery Ape Photo

7.1
CVE-2025-22750

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Patel Post Carouse

7.1
CVE-2025-22751

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farinspace Partner

7.1
CVE-2025-22752

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WesternDeal GSheet

7.1
CVE-2025-22753

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in turboSMTP turboSMT

7.1
CVE-2025-22754

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berkman Klein Cent

Frequently Asked Questions

What is CWE-79?

CWE-79 (Improper Neutralization of Input During Web Page Generation (Cross-site Scripting)) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.

How many CVEs are classified as CWE-79?

There are 53,037 CVE records associated with CWE-79 in our database. Of these, 560 are critical severity, 4909 are high severity, and 31199 are medium severity.

How can I protect against CWE-79 vulnerabilities?

Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-79 using AI-powered security agents.

Detect CWE-79 Vulnerabilities

CyberStrike's AI agents automatically detect improper neutralization of input during web page generation (cross-site scripting) vulnerabilities across your infrastructure.

Get Started